Applocker / 2008 / Win 7 Prof

Hi

Bit of a mixed bag is this one ...so Ill try and set the scene

Windows 2008 R2 Server - Still looking through the extra GP options
Windows 7 Prof

All installed on a test network...happy as larry....however...

Annoying as it is secure win prof asks for admin rights for java and adobe update...so can applocker get round this for every pc is my first question ?

If not how do I stop programs that auto update asking for admin details...imagine this on a 1000 pc's :) group policy would be ideal to get this done

If this is already answered elsewhere....sorrycouldnt see exactly what Iw anted

Ta
ET

Evil Turnip said:

Annoying as it is secure win prof asks for admin rights for java and adobe update...so can applocker get round this for every pc is my first question ?

Ta
ET

Hi ET, I didn't think AppLocker was part of Win 7 Professional or am I missing something in the question which for me is easy to do,lol.

Yes, Greg S, AppLocker is on Windows 7 Enterprise version. Microsoft Windows Enterprise: Windows 7 Features

Hi, Evil Turnip.

Corporate IT Professionals are well versed in testing and pushing out security updates as well as dealing with Group Policies. Since the volunteers here are primarily working with consumers, I suggest you try the Microsoft TechNet Windows Server Forum at Windows Server Category

I thought applocker could enforce itself on Prof via group policy....hmmI shall go to the Microsoft forums thanks anywayET

It's not available on Ultimate x64 either?

You're right, BugOutMachine, it is available on Windows 7 Ultimate. See AppLocker - Enable DLL Rule Collection - Windows 7 Forums

TechNet:

• Windows 7 AppLocker Executive Overview
• AppLocker Step-by-Step Guide

Corrine said:

You're right, BugOutMachine, it is available on Windows 7 Ultimate. See AppLocker - Enable DLL Rule Collection - Windows 7 Forums

TechNet:

• Windows 7 AppLocker Executive Overview
• AppLocker Step-by-Step Guide

That's what I thought. I run 7 Ultimate x64 and was certain I have seen AppLocker under my Group Policy Editor as well as under my Services sections.

Thank you for the link by the way. I'm enabling now.

If anyone else is reading this thread, once enabling the Rules as mentioned by Corrine, you also need to Create Rules. This Tutorial is an excellent basic Guide and TechNet is always the place to go if you know what your doing and just need some guidance.

BugOutMachine said:

Thank you for the link by the way. I'm enabling now.

You're welcome. Being the only one who uses the PCs in this house, I haven't spent time investigating the group policy editor.

Corrine said:

You're welcome. Being the only one who uses the PCs in this house, I haven't spent time investigating the group policy editor.

I have due to running multiple laptops, consoles, devices, etc. for different purposes and it's excellent to explore if you ever develop a large home network (SONOS, Sirius XM Internet devices, iPod Touch, XBOX 360 or PS3, bluetooth VPN, etc).