How does Win7 use local security policy to effectively isolate viruses?

We will inevitably encounter some viruses when using Win7 system. These viruses are not very serious. Usually antivirus software will isolate them and not delete them directly. So users can also find the existence of these virus files. Therefore, we should use local security policies to effectively isolate viruses when encountering these viruses.

The specific operation method is as follows:

First, in the Win7 system desktop start menu, open the run window, enter the secpol.msc command and press Enter to open the local group security policy. Then find the "Application Control Policy" in the local group security policy, "AppLocker" and "Executable Rules", then on the executable rules, right click and select "Create new rule".

Second, followed by implementation of the new Rules Wizard to create a new rule interface. In the following interface, select the permission, then select “reject" at the action, and select EVERYONE at the "user or group".

three, and then select in the left pane & ldquo; condition & rdquo ;, in the interface conditions, provided & ldquo; limit & rdquo; path, click the next step, the selected virus file browse button File, then click the Create button.

Fourth, this way, after you have created a default rule in case Win7 system file that suffer restrictions.

Of course, there are many ways to protect and kill viruses. They also have their own advantages. Using Win7 local policy to isolate viruses is just one of the protection methods. The day.