Win7 has surpassed XP in just two years with amazing power and speed. It has become a popular system. Of course, it has its own personality, personalized design, and many powerful and easy-to-use functions. today will introduce a new feature of them, that is, "AppLocker" (program lock) function.
program lock control by means of rules restricting the use of our computer users can only run a specified program, Protect the system and personal data by installing the specified software. For example, we don't want other users to mess with the software in the system partition when using their own computer, so we can lock the partition through "AppLocker". When
set, first type "GPEDIT.MSC" in the "Start" → "Run", click "OK" button to open the Group Policy Editor. In this section, expand the "Computer Configuration - Windows Settings - Security Settings - Application Control Policy - AppLocker" branch (click AppLocker, a "Configuration Rule Restrictions" window appears on the right. In this program gives " executable rules "," Windows installer rules "" script rules "the contents of three settings, here we are.
control program users install windows need to select the contents of control, the right branch Click the "Windows Installer Rules" option in the side window, enter the "Windows Installer Rules" interface, right-click in the interface, select "Create New Rule" in the open right-click menu. Open the "Rules Creation Wizard" dialog box, click the "Next" button in the rules "right" project type, select "reject", and in the following select system users a good denied.
then click "Next" button Select a rule type under "Conditions", such as "Path", and then enter the path that refuses the user to perform the operation in the next interface. Such as when the user is denied access to "C drive," we enter the C drive letter.
advance to the next screen, we can also create exceptional items in the interface, such as allowing users to access the C drive under A folder, etc. Then follow the prompts of the prompt wizard to complete the creation of the rule step by step. After creation, in the "Windows Installer Rules" list of Group Policy, we can see the strategy just created. Do not use a strategy in the future. Just delete it in the list. If we restrict certain users from allowing certain programs, we can set the "executable rules" and "script rules" to "implement rules".
< BR> After the rule is created, click “AppLocker” in the group policy, then on the “AppLocker” interface on the right, click “Configure Rule Enforcement” to open the rule setting dialog box. Here we will “WindowsInstaller Rule” select the "mandatory rules" and then click "OK" after being set up rules button.
program or folder can only be allowed Users can use so that other users will never mess software installed in our computer
Windows7Applocker enables enterprise IT administrators can easily configure user can run on a computer which applications: including programs, installation Files and scripts. The key feature of Applocker is convenience. For example, you can easily configure a program to run higher than one of its versions. For IT personnel, this can save a lot of policy maintenance time, if you are a supporter of Windows7 system. Then, hurry to learn the new features of this novelty.