E-Mail:
Get our new Windows 7 eBook (PDF) for $7 with 70+ Tips. Download Now!

Software Restriction Policies In XP

Software restriction policies let administrators control what types of software users can run on their computers. Doing so protects computers against malicious software and potential conflicts. Software restriction policy can be implemented through Group Policy, making it easy to apply to multiple computers. You can also implement software restriction policy on a standalone computer through the Local Security Policy.

Software restriction policies can be used to:

  • Control what software can run on computers
  • Restrict access to specific files on multi-user computers
  • Prevent executable files from running
  • Identify the users which the restrictions will apply
  • Identify those users who can add trusted publishers

When you implement a software restriction policy, you need to determine the security level: Unrestricted or Disallowed. With the Unrestricted security level, all software is allowed to run which means you must configure additional rules to block specific software. Conversely, with the Disallowed security level, no software is allowed to run which means you must configure additional rules to allow specific software. However, it is usually easier to create a few allow rules as opposed to many block rules.

To configure a restriction policy through Group Policy:

  1. Open Active Directory Users and Computers.
  2. Locate the appropriate container (the Organizational Unit containing the client computers). Right click the container and select Properties.
  3. From the Group Policy tab, click the appropriate Group Policy Object and click Edit.
  4. Navigate to Windows Settings\Security Settings\Software Restriction Policy.
  5. Open the Security Levels folder to set the default security level (Unrestricted or Disallowed).
  6. Open the Additional Rules folder to identify one or more applications and whether they are allowed to run.

What Do You Think?

 

Posted Recently

51 queries / 0.540 seconds.