OK here is the instructions that everyone was asking about before. This is a ZERO POPUP setup making it more user friendly. There is probably other MD users who already know about this. With this strategy of my setup you can have some apps locked down while at the same time have other apps in learning mode with Zero Poups. the main advantage of this is to be able to install new apps and install updates with zero pop ups without compromising system security by having to disable MD and put every thing back in learning mode. MD is the only HIPS that I know of that allows you to do this. Its quite simple really. after you first install MD Tick these 2 box's shown in the screenies below. then in the default applications create a new group called locked down apps or something similar, like I have done below. Then set all rules to deny except for bottom 2 like I have done below. Ok so that's that setup. When apps first appear you will notice that by default they all have their rules to ignore . DO not change them Leave them all on Ignore for every app. when you feel each app has had enough time in training mode simply move each app 1 by 1 into the Locked down apps group. MD won't permit and create rules for apps in the locked down. Any permit rules which were not created during the apps training period will be default denied and logged inside the locked down folder.