Supported System Variables for Application Control Rules

Last Updated On: 28 Oct 2026|

2 minutes read |

The Application Control detection rules support Windows system variables in file or folder paths. The following table lists the supported variables:

System Variable	Description
%APPDATA%	Refers to the C:\Users\{current_user_account}\AppData\Roaming folder for the logon user.
%LOCALAPPDATA%	Refers to the C:\Users\{current_user_account}\AppData\Local folder for the logon user.
%USERPROFILE%	Refers to the user's profile folder. A typical path is C:\Users\{current_user_account}
%TEMP%	Refers to the C:\Users\{current_user_account}\AppData\Local\Temp folder for the logon user.
%TMP%	Refers to the C:\Users\{current_user_account}\AppData\Local\Temp folder for the logon user

Note

To use system variables in a folder-path rule, use this format: {variable}\{sub-folder}
Example: %USERPROFILE%\Downloads