Using AppLocker on Windows 7 to lock down what applications can run.
This is a Windows 7 only feature don’t be jealous…
Do you want to lock down what applications the kids can run on your shinny new Windows 7 computer? Well they have a little known feature built into the latest and greatest version of Windows. It takes a little know how to get it going but that is what we are here for – right?
First set up the machine in question with the applications you want on it. Install the versions you want to run. Then we will need to open up the Group Policy editor or Local Security Policy Microsoft Management Console (MMC) snap-in.
- Click Start, type secpol.msc in the Search programs and files box, and then press ENTER.
- In the console tree, double-click Application Control Policies, and then double-click AppLocker.
- Right-click Executable Rules, and then click Create Default Rules.
- AppLocker rules are automatically created .
To get into AppLocker and more advanced setups check out this page from Microsoft entitled AppLocker step by step scenarios http://technet.microsoft.com/en-us/library/ee791835%28WS.10%29.aspx.
| Print article |



about 2 years ago
Your timing on this one is excellent. We are just starting to look at our corporate build for Win 7 / Server 2008 and this will come in very useful. Good job!
about 2 years ago
I would love to hear how it goes. Have you built an implementation plan yet? Any interest in writing an article on it?
about 2 years ago
Hi Karl,
As of yet we are in the ideas stage as there is a lot of talking over the backend side of things and whether we go fully off site servers, or keep mail and file / print on site. But yeah, we should be in the planning stage proper by end of feb and would be happy to write an article about our experiences etc.
Kip
about 2 years ago
Awesome I am excited when you are ready hit me at karl at asktheadmin.com and I will get your account setup.
about 2 years ago
I’ve heard many more things about windows 7 but have yet to take the plunge. I avoided vista like the plague.
What are your thoughts on Windows 7 as a whole? Should we (I) upgrade my XP computer or is it about just as good?
Cheers,
Kerry