Auto-Containment: Default rule "Block - Containment Folders - Any" is void

A. THE BUG/ISSUE (Varies from issue to issue)
Can you reproduce the problem & if so how reliably?:

If you can, exact steps to reproduce. If not, exactly what you did & what happened:
1: Reset the Auto-Containment rules;
2: Run an application in the container;
3: Double-click any executable file in VTRoot folder.

One or two sentences explaining what actually happened:
The executable file in VTRoot folder will run.
The default rule “Block - Containment Folders - Any” is not working.

Any other information, eg your guess at the cause, how you tried to fix it etc:
In v8, this rule was “Block - Sandbox Folders - Any”.
In v10, it’s changed to “Block - Containment Folders - Any”.
But there is no “Containment Folders” in File Groups.
Therefore this rule is void.
Change it to “Block - Sandbox Folders - Any” and it will work.

Exact CIS version & configuration:
Internet Security.

OS version, SP, 32/64 bit, UAC setting, account type, V.Machine used:
Win 7 SP1 32 bit.


Nobody thinks this default rule is not correct?
It’s not working as it says or as expected.

Because you were using an imported config from a previous version, and when you use reset to default, it used default of new config version. Also when you click reset to default it defaults using the default internet config, even if you are using a different configuration.

Oh, I see. Thank you.
There’s no way to reset the File Groups or the configuration?

Go to the configuration section and choose import, then browse to the CIS install directory, of course you will need to choose a different name as there can only be one unique config name loaded.