How do I find a Windows process name for use with the App Process device posture criterion to use in an Admission Rule?

Follow the steps below to find the name of the process that you want to use in the App Process criterion for Windows:

1. To open the command prompt on Windows, press the Windows key + R or type "cmd" in the Run window and press Enter.

2. Copy and paste this command to obtain your Username: $env:USERNAME press Enter. Use the output in the command below to replace USERNAME

3. Copy and paste this command to obtain your UserId: (Get-WmiObject Win32_UserAccount | Where-Object { $_.Name -eq'USERNAME' }).SID press Enter.

4. Copy and paste the following commands replacing the {UserId} with the value output from the command in the step above.

   1. Get-ItemProperty HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\* | Select-Object DisplayName, displayversion press Enter.

   2. Get-ItemProperty HKLM:\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\* | Select-Object DisplayName, displayversion press Enter.

   3. Get-ItemProperty Registry::HKEY_USERS\{UserId}\Software\Microsoft\Windows\CurrentVersion\Uninstall\* | Select-Object DisplayName, displayversion press Enter.

   4. Get-AppxPackage -User {UserId} | Select-Object -Property Name, Version press Enter.

5. A list of application names and their versions will be displayed. The string in the first column is the Application Name to use in the rule.