I like application control policy to deny execution for apps.
I have a problem with apps. For Example: SKYPE

Skype is creating an automatic shortcut into startmenu (the installer does): Skype.lnk
- Target is already filled in, and can't modify it.
- Size is much bigger than an manual created shortcut.
That's another shortcut than what you can make by yourself.
- You can specify target. for ex. C:\Program Files\Skype\phone\skype.exe
- Size is very small.

If i block (no execution): "Skype.exe" then.

Main executable:
Target: C:\Program Files\Skype\phone\skype.exe is = blocked perfectly

Manual created shortcut (.lnk):
Target: C:\Program Files\Skype\phone\skype.exe = blocked perfectly

Automatic created shortcut (.lnk):
Target: Skype 5.0
Gives me a repair of the msi, (please wait while Windows configures Skype 5.0) and ends with: The feature you are trying to use is on a network resource that is unavailable. (msiexec is searching for SkypeSetup.msi)

Do i need to also include the Skype.lnk to restrict the access and get rid of the msi repair?

(i have test that, and that is working. It's not give a message that you don't have access as it is doing for the .exe file , but ok)
Can't find anything in the documentation about the (installer installed) .lnk files



Do i need to seperate