

AppLocker is included with the current beta versions of Windows 7 and Windows Server 2008 R2. Microsoft has jumped into the game by creating AppLocker, a new tool for application white-listing in Windows 7.
Applocker gpo software#
If you ever tried using this feature, you know that it's cumbersome to configure and that updating rules to accommodate software updates is almost impossible. Software Restriction Policies, which are applied via Group Policy, are designed to control which users can run which applications. Microsoft introduced a tool for white-listing way back in Windows 2000. White-listing consists of checking each application at the time it starts to see whether it's on a list of allowed programs, and preventing it from running if it's not on that list.

Recently, many security experts have argued that the only way to prevent unwanted and dangerous programs from running on a computer is application white-listing. Downloading a program file from the Internet or copying it from a flash drive can be all that's needed for a program to start. Programs don't need to be installed to be running on a computer. When users run unapproved apps, it doesn't take long before admins have to solve the ensuing problems. With the new AppLocker feature in Windows 7, Microsoft aims to simplify the task of ensuring that users can only run approved applications. Users who run unwanted or dangerous applications can undermine the security of your entire network.

White-listing certain applications is one way to make sure your network stays safe. Security Advisor AppLocker Reins in Applications
