I've created a LEM rule to block access to mspaint.exe from a specific computer and pop up a message with a reason, unfortunately my rule seems to do absolutely nothing.
I've attached a screenshot of my config, if you could take a look and tell me where I'm going wrong I'd be very grateful!
Thanks