[Music] hi my name is sha Walker and I'm a principal product success architect and part of the Ranger team here at service now today I'm going to be talking to you about restricted software so what we're going to go through today is go through a definition of what restricted software is we're going to talk briefly about how to restrict software and then we're going to take you through a demo of actually setting a software model as restricted and generating those removal candidates so what is restricted software um and essentially restricted software it's very common for employees to have rights to their machines and be able to install software um that's really meant for personal use uh and a lot of times that software can have negative impact on the company so a lot of companies often have that list of software that's that's really prohibited to be installed on their devices so even though a lot of companies do have acceptable use policies Etc people still go ahead and install unauthorized software so you know that unauthorized software on a corporate domain can really lead to a lot of compliance issues it can also introduce potential vulnerabilities um and it can expose the company to really some potential HR and maybe some PR issues so it's really important for customers to be able to identify hey we want this restricted software is on our Network we want to get rid of it so how restricted software works so software can be identified as restricted by setting the attribute restricted software on the software model so each night a scheduled job called Sam identify blacklisted software runs which looks for restricted software installations and then generates the removal candidate for it so there's also another video um that I created about removal con uh candidates and how to process through those um the S manager once that removal candidate's been generated the S manager can really remove like review those removal candidates and begin the process to have that software removed and then the Sam manager can review all the removal candidates Pro and begin to process all of those installations at the same time so now I'm going to jump into an instance and walk you through setting up a restricted software model okay so now I'm logged into an instance of service now Washington with software Asset Management installed then I'm going to go ahead and restrict a couple of software models so to do that I want to to go into the license operation and into my software models so um we noticed as we're poking around here our it depart our information security department has uh given us a list so we're going to take a look and one of the things we see um that's in our instance is Minecraft so a lot of times you know people install Minecraft it's a game um but it is by Microsoft and it is a licensable product and it's pretty pretty sure that your organization hasn't actually purchased it um somebody else has probably gone ahead and purchased this so we're going to identify this as restricted software and say okay we want this removed off of all of our machines so let's set up removal candidates for all of these so what we're going to do is go into the software model and down underneath the generals section you're going to see there is a little check boox called restricted software so I'm going to go ahead and save this and it's that simple to to list a software model as a restricted software model and I automatically have removal candidates generated for it the next time the identifi restricted software job runs uh another one that's fairly common too that a lot of people see is like there's the goto my PC um that's a very common one as well that people can install fairly easily and this allows remote access to the machine see we really don't want that on our Ma machines because it can have some potential security issues so we want to make sure anytime that this installs come in for this those removal candidates get set up so again under General we're going to go to restricted software and save this okay so that's as simple as that to Mark a software model as restricted so what happens as we mentioned in the presentation is that um every day there is a scheduled job that runs and I'm just going to find it here for you guys and there is a job called if I can find it here there it is identify blacklisted software um and I can go ahead and I can execute this now so what this is going to do is this is going to go out take a look for any software models that are marked as restricted and then it's going to see if there's any related installations and generate those removal candidates for it so what I'm going to do now is come over into my removal candidates I'm not sure if the job has finished yet or not but let's quickly see if there are any removal candidates been generated for anything so no not yet so we're going to pause this and and wait till some of these the job finishes running and we start getting some removal candidates generated okay so now the job has finished running and I can see underneath removal candidates I have three installations for Minecraft that have been detected in the environment and Reclamation candidates have been automatically created and begun the revocation process so if you watch the other video I have on removal candidates we'll talk a little bit about you know the different the flow on the software reclamation workflow um and how it works and the different methods you can use to remove the software so that's what would actually remove the software so it unlike the other potential removal candidates where the user has the option of of of saying yes I need to keep this software and no I don't need to keep this software with restricted software there is no approval because you're saying this software is not allowed in our environment so automatically kicks off the Reclamation process uh and just to show you here as well too we can take a look for that go to my [Music] PC and see if any were generated there and yes we have again three Reclamation candidates or removal candidates that were automatically kicked off for the go to my PC um software model as well and that ends the demonstration of remove or sorry of restricted software so just to recap in this video we talked about restricted software so what is it and why is it important some for most organizations to restrict specific software we also talked uh about the restricted software process and then I jumped into an instance and showed you how to configure a software model for being restricted and then how to generate those removal candidates for more information on this spe specific topic you can take a look at uh service now product documentation and the software models field um section does talk about the restricted software field as well as there's a service now solution brief called restricted software lists and those can be very helpful for organizations wanting to start doing this I hope you found this video helpful I'll see you in the next one