Supported System Variables for Application Control Rules

Last Updated On: 14 Jul 2026|

2 minutes read |

The Application Control detection rules support Windows system variables in file or folder paths. The following table displays the variables supported:

System Variable	Description
%APPDATA%	Refers to the C:\Users\{current_user_account}\AppData\Roaming folder for the logon user.
%LOCALAPPDATA%	Refers to the C:\Users\{current_user_account}\AppData\Local folder for the logon user.
%USERPROFILE%	Refer's to the user's profile folder A typical path is C:\Users\{current_user_account}
%TEMP%	Refers to the C:\Users\{current_user_account}\AppData\Local\Temp folder for the logon user.
%TMP%	Refers to the C:\Users\{current_user_account}\AppData\Local\Temp folder for the logon user

Note

For using the system variables in the folder-path rule, use the format: {variable}\{sub-folder}
Example: %USERPROFILE%\Downloads