Hi everyone:
I need to lock down our work computer (enable white-listing to run only apps with specific digital signatures) and I'm wondering where can I buy Windows 7 that supports App Locker feature? I need it only for one PC.
AppLocker requirements
AppLocker is available in all editions of Windows Server 2008 R2 and in Windows 7 Ultimate and Windows 7 Enterprise. To use AppLocker, you need:
- A computer running Windows Server 2008 R2, Windows 7 Ultimate, Windows 7 Enterprise, or Windows 7 Professional to create the AppLocker rules. Windows 7 Professional can be used to create the rules, but the rules cannot be enforced on computers running Windows 7 Professional. The computer can be a domain controller.
- For Group Policy deployment, at least one computer with the Group Policy Management Console (GPMC) or Remote Server Administration Tools (RSAT) installed to host the AppLocker rules.
- Computers running Windows Server 2008 R2, Windows 7 Ultimate, or Windows 7 Enterprise to enforce the AppLocker rules that you create.
Thanks. I know that it sounds like a simple question, but where can I get Windows 7 Ultimate, or Windows 7 Enterprise? I can't seem to find any place where I can buy it?
You will need to contact your Microsoft Partner who supplies your company with software licensing, I'm not sure if the Ultimate version will be available but Enterprise should be although with Windows 7 now out of support and not being sold to retail customers I'm not sure of minimum licence quantities to businesses, you may be able to upgrade some of your existing licences to Enterprise
Windows 7 Ultimate was always a specialist version of Windows, It was basically a rebranded Enterprise aimed at Independent technicians who did not have a need for Volume licensing but needed access to the enterprise features for testing and maintenance purposes, It was also available to Technet & MSDN subscribers so did find it's way onto Enthusiast's systems and was sold is very small quantities as stand alone Retail copies.
Unfortunately as Ultimate was the most pirated version of Windows 7 the copies were quickly withdrawn from sale when Windows 7 Reached End of Support.
You could try contacting Dell to ask if they can still supply an upgrade or if you have an extended warranty with Microsoft they may be able to help
Thanks. I just chatted with a tech support at Dell and here's what the guy told me:
Then the same question to Microsoft and here's their answer:"I am sorry we do not sell Windows 7 ultimate 64 Bit DVD or download. I would recommend you to contact Microsoft directly."
Guys, how dangerous is it to buy Win7 Ultimate on a DVD off of eBay? A guy is selling supposedly sealed one for $70 USD."Windows 7 is no longer available here in the website. What we currently have is the Windows 10"
If you buy off ebay and pay with paypal at least if its wrong you can get your money back
Effectively, as said by others, you need at least Ultimate, the most expensive edition, and it's almost impossible to find a legitimate one out there (don't bother with the disc, these can be downloaded, search for buying a legitimate serial instead, that's the real value, BTW).
Even if you decide to downgrade to Windows 10, AppLocker has been completely removed and only available in the Enterprise edition, not in Pro (equivalent of Win7 Professional and Ultimate).
As an immediate alternative, you can look at Software Restriction Policies, the "little brother" of AppLocker that supports a subset of its features and is available since the Professional edition. Not an ideal solution, but maybe suffices for your case.
Thanks, guys.
Yeah, I tried using software restriction policies before. Unfortunately they are nowhere as good as AppLocker. I had a good success rate locking the system down with it on an Active Directory domain before. Unfortunately we're talking about a small business here, so there's no way they can afford paying that kinda Windows license.
And yes, I understand that someone can counterfeit a DVD. But the same applied to a serial number. I mean if I buy one where would I download legitimate copy of Windows 7 Ultimate from? Microsoft doesn't have it on their servers anymore. Plus how would I know that the key is legit?
Quote