CIS 170F: Windows 7 Administration

Week 10

Application Support
Application Control Policies
AppLocker

  • TThe choice of applications has changed with time. Since Windows XP, applications have changed to use new methods and frameworks to execute. It is difficult to add major new features to software restriction policies without breaking functionality that older Windows clients depend on. Starting with Windows 7 and Windows Server 2008 R2, AppLocker is a replacement management strategy for limiting applications allowed to run.
  • AppLocker is a replacement management strategy for limiting applications allowed to run. It relies on Group Policy Objects just as the older software restriction policies do.
  • The advantage in using AppLocker with Windows 7 and future client operating systems is that it works better as a management strategy with the current application landscape. Clients older than Windows 7 do not recognize or use AppLocker controls. Because this is an enterprise application management strategy, it is only applied to Windows 7 Enterprise and Ultimate Editions. Windows Server operating systems that are earlier than Windows Server 2008 R2 are not and cannot be enhanced with AppLocker support.