# Anti-Executable Service

Anti-Executable Service ensures total endpoint productivity by only allowing approved applications to run on a computer or server. Any other program – whether they are unwanted, or simply unnecessary – are blocked from ever executing.

{% hint style="info" %}
To enable communication between the computer and Deep Freeze Cloud Services through the firewall, ensure that outbound traffic is permitted on specified ports, and access is allowed on certain domains and IP addresses on both the console and client computer. Refer to [Authorized Domains and Ports](appendix-a-authorized-domains-and-ports).
{% endhint %}

To add Anti-Executable to the Policy, go to _Add Policy > Deep Freeze Windows_ > _Anti-Executable >_ select _Enable (install and inherit settings from Faronics Default policy)_ or _Enable (Install and use below settings)_. Selecting this option installs Anti-Executable on all computers using this Policy.

{% hint style="info" %}
Selecting _Enable (install and inherit settings from Faronics Default policy)_ or _Enable (Install and use below settings)_ installs Anti-Executable on the computers whenever the computers check-in. The computers check-in based on the heartbeat specified in [Cloud Agent Settings](general-settings/cloud-agent-settings)_._

* Enable (install and inherit settings from Faronics Default policy) – installs the service and inherits settings from the Faronics Default policy. Selecting this option saves time in configuring all the policy settings. Selecting this option makes the settings for the current policy read-only.
* Enable (Install and use below settings) – installs the service and uses custom settings. Selecting this option will allow you to customize the settings for this service in the current policy.
* Disable will not install the service or will uninstall the service from the computers whenever the computers check-in.
{% endhint %}

You can configure settings for Anti-Executable through various tabs. The configuration settings for Anti-Executable through various tabs are explained further in this chapter.

* [Anti-Executable Terms](anti-executable-service/anti-executable-terms)
* [How to use Anti-Executable](anti-executable-service/how-to-use-anti-executable)
* [Deployment Options](anti-executable-service/deployment-options)
* [Protection Settings](anti-executable-service/protection-settings)
* [Policy Control List](anti-executable-service/policy-control-list)
* [Ransomware Prevention](anti-executable-service/ransomware-prevention)
* [User Settings](anti-executable-service/user-settings)
* [Central List](anti-executable-service/central-list)
* [Anti-Executable Dashboard](anti-executable-service/anti-executable-dashboard)

