![]() ![]() like blocking the install via publisher cert (i.e. You can try all sorts of ways to block them. If you do quick and dirty, create a new GPO and enable tracking of exe and dll and find the most common browser add-on's on your machine's that you don't want and add them with a deny rule. The more comprehensive way is to make a white list of all apps on all your computers (not just IE). The quick and dirty (but not comprehensive) way is to allow everything and add deny rules for what you want to block. There's some good intro videos from TechEd (search that site for more Applocker vids). It's a application whitelist and blacklisting feature in Group Policy (but only works for Windows 7 clients). Is this just a solution for XP?įor Windows 7 Applocker GPO can help.
0 Comments
Leave a Reply. |