Software Restriction Policies In XP

Software restriction policies let administrators control what types of software users can run on their computers. Doing so protects computers against malicious software and potential conflicts. Software restriction policy can be implemented through Group Policy, making it easy to apply to multiple computers. You can also implement software restriction policy on a standalone computer through the Local Security Policy.

Software restriction policies can be used to:

• Control what software can run on computers
• Restrict access to specific files on multi-user computers
• Prevent executable files from running
• Identify the users which the restrictions will apply
• Identify those users who can add trusted publishers

When you implement a software restriction policy, you need to determine the security level: Unrestricted or Disallowed. With the Unrestricted security level, all software is allowed to run which means you must configure additional rules to block specific software. Conversely, with the Disallowed security level, no software is allowed to run which means you must configure additional rules to allow specific software. However, it is usually easier to create a few allow rules as opposed to many block rules.

To configure a restriction policy through Group Policy:

1. Open Active Directory Users and Computers.
2. Locate the appropriate container (the Organizational Unit containing the client computers). Right click the container and select Properties.
3. From the Group Policy tab, click the appropriate Group Policy Object and click Edit.
4. Navigate to Windows Settings\Security Settings\Software Restriction Policy.
5. Open the Security Levels folder to set the default security level (Unrestricted or Disallowed).
6. Open the Additional Rules folder to identify one or more applications and whether they are allowed to run.

• Inspiron Mini 10v Netbook
• Mini 1030NR Netbook
• mini NB205-N210 Netbook
• Windows XP Professional w/SP2
• Aspire One AOD250-1116 Netbook
• Mini 311 Netbook
• Aspire One AOD250-1326 Netbook
• Windows XP Professional W/SP2
• Eee PC 1005HA Royal Blue Netbook
• Eee PC 1005HA Seashell Netbook
• N110-12PBK Netbook
• Mini 5101 Netbook
• Mini 110-1030NR Netbook
• Eee PC 900 Netbook
• N120-12GBK Netbook
• Aspire One D250-1962 Netbook
• Windows XP Professional
• Windows XP Professional
• LT2022u Netbook
• Eee PC 900 Netbook
• Windows XP Pro w/ SP3 Multilingual
• One AOD250-1165 Netbook
• Wind U123-002US Notebook
• Eee PC EPC1002HA-BLK006X Netbook
• ThinkPad T40 Notebook