When you first install ICE on a computer, it will block all program files from being created, written, renamed or deleted.

This will keep the user from installing something they shouldn’t.

There are two cases where the installation of ICE could case trouble:

  1. Programs that update themselves
  2. Some programs create files that ICE will block

Here’s how we recommend you deal with those issues.

Program Auto-updates:

Since malware is sometimes disguised as an auto-update, we recommend that you don’t allow the computer user to apply them.  Only allow program updates to be applied by someone who knows how to safely apply an update via the program.

Trusted programs:

Some programs, like those written in .Net and Java, create .exe files before they start.  Since ICE will block these files from being created, those programs will not work correctly.

You will need to configure a ‘Trusted program’ exception with ICE, so ICE will ignore the files it creates.  You can find the instructions on how to create an trusted program exception here.

In summary:

After you install ICE on a new computer, have the user attempt to start the programs they normally use.   If any don’t start correctly, set up a trusted program exception for them.

Whenever YOU need to work on the computer, pause ICE and apply necessary updates directly.