Welcome
Application Control
BigFix Application Control provides a robust framework for managing application usage within an organization. It allows administrators to define policies that dictate which applications can or can not be run on endpoints, thereby enhancing security and compliance.
Administrator Guide
This guide is for users who want to administer BigFix® Application Control.
Overview
Set a secure environment by using Application Control.
User Roles
This document outlines the various user roles associated with the BigFix Console, including the Policy Manager/Administrator, Desktop User, and Exception Manager. Each role is defined with its responsibilities and interactions within the system, providing clarity on user responsibilities in managing and utilizing the solution.

BigFix Documentation Homepage
BigFix 11 Lifecycle Documentation
Welcome to the BigFix Lifecycle documentation, where you can find information about how to install, maintain, and use BigFix Lifecycle.
BigFix Platform
BigFix Query
Lifecycle overview
BigFix Lifecycle is single-agent, single-console technology that provides near real-time visibility into the state of endpoints.
Lifecycle guides in PDF format
Following is a list of links to the BigFix Lifecycle guides in PDF format:
Software Distribution
Use the BigFix Software Distribution applications to deploy software to endpoints across your network from a single location. Maintain control and visibility into software delivery and installation. Device owners can use the Self Service Application to manage software and other BigFix actions that are deployed to them as offers.
OS Deployment
BigFix OS Deployment, which is part of the BigFix Lifecycle Management suite, provides a consolidated, comprehensive solution to quickly deploy new workstations and servers throughout a network from a single, centralized location. This solution saves time and money, enforces a standardized and approved image, and reduces risks associated with non-compliant or insecure configurations.
Remote Control
BigFix Remote Control application helps to communicate between different components, clients, and endpoints within BigFix environment.
Power Management
Use Power Management to control, monitor, and manage conservation policies in your deployment.
Application Control
BigFix Application Control provides a robust framework for managing application usage within an organization. It allows administrators to define policies that dictate which applications can or can not be run on endpoints, thereby enhancing security and compliance.
- Release Notes
  A summary of new or changed features and enhancements included in BigFix Application Control.
- Administrator Guide
  This guide is for users who want to administer BigFix® Application Control.
  - Overview
    Set a secure environment by using Application Control.
    - System Architecture Diagram
      The system architecture diagram of Application Control.
    - User Roles
      This document outlines the various user roles associated with the BigFix Console, including the Policy Manager/Administrator, Desktop User, and Exception Manager. Each role is defined with its responsibilities and interactions within the system, providing clarity on user responsibilities in managing and utilizing the solution.
    - Key concepts and terminology
      Application Control enables policy-driven management of application usage on Windows devices within BigFix. This document outlines key terms such as Application Control Policy, Application Control Rule, CSV Ruleset File, and Effective Control Policy, which are essential for understanding the functionality and configuration of Application Control.
    - Audience
      This guide is intended for administrators overseeing Application Control, detailing the features available in the BigFix® interface. It covers tasks such as installation, configuration, rule management, and monitoring, providing essential information for effective administration.
  - Installing BigFix® Application Control
    Install BigFix Application Control in two steps: first, identify the endpoints lacking the application, and second, execute the installer task on those endpoints. This process ensures that the application is properly deployed across your desired systems.
  - Managing BigFix® Application Control
    This section covers post-installation activities such as configuring and overseeing application settings to ensure optimal performance and security. This process is essential for maintaining system integrity and user access control.
  - Support
    For more information about this product, see the following resources:
- User Guide
  This guide is for desktop users or end users who will use BigFix® Application Control.
- Exception Manager Guide
  Designed for Exception Managers, this guide details the effective use of the ServiceNow™ tool. It highlights important features, functionalities, and best practices for managing exceptions efficiently.
- Application Control V1 Readme
Server Automation
Server Automation provides powerful automation. You can use it to sequence automation actions in steps across multiple endpoints.
Profile Management
Profile Management is a WebUI-based feature of BigFix Lifecycle. It provides Security Administrators the capability to define and deploy security policies to Windows 10 and macOS devices.
BigFix Remediate
BigFix MCM

User Roles

This document outlines the various user roles associated with the BigFix Console, including the Policy Manager/Administrator, Desktop User, and Exception Manager. Each role is defined with its responsibilities and interactions within the system, providing clarity on user responsibilities in managing and utilizing the solution.

The following user roles are present in BigFix® Application Control:

Policy Manager/Administrator

This role is the BigFix Console User/Operator, who deploys and configures the Application Control policies, creates and manages the control rules, and reviews the effective configuration of the endpoints.
Desktop User

A user of an endpoint that is managed/restricted by BigFix Application Control. Such users can also be called the end users. They receive notifications when applications are blocked and can raise exceptions through the Notification Utility.
Exception Manager

A user of an ITSM application/solution who is authorized to approve or reject the exception requests raised by the desktop or end users. They review the exception requests in the ITSM application, approve or deny temporary access requests, set time limitations on exceptions, and ensure compliance with their organization's security policies.