Overview of Windows 7 Applocker

Windows 7 Applocker is used to manage user access to applications

. It is used to assign application access to users. System administrators and users with administrative rights can create rules based on file attributes, determining which applications should run and in what conditions. Applocker also allows administrators to run audits of user rules and import and export application rules between computers.

For example, parents can find out what applications their children have been trying to install and what software has tried to update on its own (a sign of possible malicious software infection). System administrators can also copy application rules from Applocker from one computer to another or distribute them across the entire network, saving time and effort. Applocker rules can be set based on path, publisher, and file hash. For "on path" rules: These rules are based on the application path. For example, an "on path" rule could be C:programsprogram name. Advantages of on path rules: 1. It is easy to determine the current application path. 2. Creating a path rule can be done via selecting the application folder while setting up the rule Disadvantages of on path rules: If the path changes, such as when a new software version installs in a different directory, the rules are now not applicable to the new installation. A new version of Exceed or Adobe that creates a new application folder is no longer recognized in the old rules. For publisher rules: Publisher rules are based on the software publisher. This is determined by the publisher identified in the software's authentication files. For example, Microsoft Excel has the publisher in its references as Microsoft. Advantages of publisher rules: 1. It is convenient if you have many tools created by the same publisher. Adobe, Microsoft, and Intuit are examples of software publishers for which the user could have multiple applications. Set the rule for allowing Microsoft published software to update and install once, and you're done for both the Operating System and all Office products. 2. The publisher rule works no matter how often the file structure changes or the application upgrades. It even works on operating system upgrades as long as the Applocker rules are carried over. Disadvantages: 1. If anyone manages to spoof the publisher's identification, your computer will not prevent users from installing and running the application. For file hash rules: File hash rules use an encrypted signature for the application to authorize its updates and installation. Advantages of file hash rules: 1. By using a cryptographic hash, it's nearly impossible for malicious software to get through. 2. Users can't bypass the rule to install their own applications as could be done by trying to install new software in the same folder as existing software. Disadvantages of file hash rules: 1. Applocker has to be updated every time the application changes, whether it is a software upgrade or and update. For Java and anti-virus applications that can update weekly, this creates a maintenance nightmare.

Overview of Windows 7 Applocker

By: Super Luck

POST COMMENT

How will Windows look like in 10 years time? Increasing The Speed Of Your Windows XP Computer Can Be Done By Optimizing The Registry Can Hurricane Replacement Windows Save My Home? Ipod Nano (5th Generation) Video To Windows Movie Maker Appliance Repair Appliance Repair Began Grading Going To Protect The Industry? Why Registry Cleaner Necessary For Every Computer? Repair Credit Rating - Used Car Loans Easily Obtained With An Improved Credit Rating Air Conditioning Repair Doesn't Have To Cost An Arm And A Leg How To Repair Ylod And Save Money! The Best Registry Cleaners - A Guide For Beginners Finding A Home Repair Electrical Contractor Fix user32 dll Not Found Error With Registry Cleaner Fix OTUtil2009 dll Not Found Error With Registry Cleaner