I'm implementing Software Restriction Policy on our workstations. The policy is to block everything except a list of white listed paths.
I'm trying to white list a directory inside Thunderbird user's profile to allow Lightning extension to work. The path is
The user's profile name is randomly generated, so I need a wildcard.
Unfortunately, this doesn't seem to work because of the wildcard. The DLL continues to be blocked by SRP.
I also tried to white list the certificate (the DLL is signed by Mozilla certificate), but this doesn't work. Maybe this apply only to signed .exe?
I white listed the hash for the moment, but this will require maintenance after each release of Thunderbird, so I would prefer to white list the path instead.
Applocker is not an option, we are using Windows 10 Pro.