Use Windows 7 AppLocker: Here's how
Related Videos: S01E07 - Publishing Win32 Applications using Microsoft Intune - (I.T) (May 2024).
Use the AppLocker in Windows 7 to block programs and installations. Programs blocked in this way can then no longer be executed by users. In this practical tip, we will show you how to set up the program lock.
In advance: start application identity
Application identity should be enabled to enforce AppLocker. This service verifies the identity of applications.
- Click the Windows start icon. Type "services.msc" in the search window and press the Enter key.
- Right click the found Application Identity command, then click Properties.
- Select "Automatic" as the start type and save with "OK".
Set up AppLocker in Windows 7
Various rules can be created in the AppLocker. For example, create a rule for a file path.
- Click the Windows start icon and type "gpedit.msc". Press the Enter key.
- The "Editor for local group guidelines" opens. Select "Computer Configuration" -> "Windows Settings" -> "Security Settings" -> "Application Control Policies" -> "AppLocker".
- "Executable rules" prevent certain programs from starting, for example. Under "Windows Installer Rules" you can create rules regarding installations. Right-click on "Executable rules" and select "Create new rule".
- Under "Preparation", click "Next". In the next field, select "Deny". You can specify a specific group here or leave "Everyone".
- For example, select "Path" to lock a special file path. Find the path you want to block. Finally, click Create.
- Now open the command prompt. To do this, click the Windows start icon again and type "cmd.exe". In the opened window, type "gpupdate.exe" to renew the computer guidelines.
Note: The AppLocker only works under Windows 7 Enterprise and Ultimate. Read another practical tip on how to block individual websites in Windows.
Latest videos
You should activate the application identity in advance.
Right-click to create a new rule.
Under "Preparation", click "Next".
For example, select "Deny" as an action and define a user or group to whom the rule applies.
You can choose between different condition types.
Enter a path under the condition type "Path".
Your created rule is displayed.
