#Applocker win 7 software#

This makes it easier to achieve the desired level of application control.Īs much of an improvement as AppLocker is over software restriction policies, creating all of the necessary AppLocker rules still involves a lot of work, which may be less than appealing to already overworked administrators. Rather than having administrators specify which applications they want to block, AppLocker requires them to create rules that tell Windows which applications should be allowed to run. Even if an administrator developed such a collection, those rules would eventually be null as applications are patched and new apps are released.ĪppLocker takes a different approach. Needless to say, it is impossible for an administrator to create a set of rules that blocks every single unauthorized application. The problem with this approach is that unless an administrator takes specific measures to block an individual app, Windows allows it to run.

Software restriction policies were meant to be a mechanism for blocking undesirable applications. Like software-restriction policies, AppLocker is group policy-based and is designed to allow administrators to control the applications that users can run. Software-restriction policies are still supported. Windows Server 2008 R2 and Windows 7 include a next-generation application management feature called AppLocker.