Software Restriction Policies In XP

Software restriction policies let administrators control what types of software users can run on their computers. Doing so protects computers against malicious software and potential conflicts. Software restriction policy can be implemented through Group Policy, making it easy to apply to multiple computers. You can also implement software restriction policy on a standalone computer through the Local Security Policy.

Software restriction policies can be used to:

• Control what software can run on computers
• Restrict access to specific files on multi-user computers
• Prevent executable files from running
• Identify the users which the restrictions will apply
• Identify those users who can add trusted publishers

When you implement a software restriction policy, you need to determine the security level: Unrestricted or Disallowed. With the Unrestricted security level, all software is allowed to run which means you must configure additional rules to block specific software. Conversely, with the Disallowed security level, no software is allowed to run which means you must configure additional rules to allow specific software. However, it is usually easier to create a few allow rules as opposed to many block rules.

To configure a restriction policy through Group Policy:

1. Open Active Directory Users and Computers.
2. Locate the appropriate container (the Organizational Unit containing the client computers). Right click the container and select Properties.
3. From the Group Policy tab, click the appropriate Group Policy Object and click Edit.
4. Navigate to Windows Settings\Security Settings\Software Restriction Policy.
5. Open the Security Levels folder to set the default security level (Unrestricted or Disallowed).
6. Open the Additional Rules folder to identify one or more applications and whether they are allowed to run.

• Inspiron Mini 10v Netbook
• mini NB205-N210 Netbook
• Eee PC 1005HA Seashell Netbook
• Aspire One AOD250-1116 Netbook
• Mini 1030NR Netbook
• Windows XP Professional w/SP2
• Mini 110-1030NR Netbook
• Aspire One AOD250-1326 Netbook
• Eee PC 1005HA Royal Blue Netbook
• Mini 5101 Netbook
• Mini 311 Netbook
• N110-12PBK Netbook
• Windows XP Professional W/SP2
• 1005HA-PU1X-BK Netbook
• Mini 1116NR Netbook
• Aspire One D250-1962 Netbook
• LT2022u Netbook
• Mini 110-1020NR Netbook
• ThinkPad T40 Notebook
• Windows XP Professional
• Wind U123-002US Notebook
• mini NB205-N312/BL Netbook
• Eee PC T91 Tablet PC
• One AOD250-1165 Netbook
• ThinkPad T400 Notebook