I have to think about a solution for these scenarios. I can create a list with allowed locations which will make WFC to automatically create a new allow rule for exe files under a certain folder when they try to connect. Or make the notification dialog to automatically update an existing rule which ends with the same exe file name, in this way the user at least knows that a rule will be updated. Or... Suggestions are welcomed. I don't have yet a nice solution to this problem.