Can't Get AppLocker to Function Properly

[Jforsyth]

Hello,

I am trying to set up a user account that can be used to run Windows Media Center. I would like to restrict access to just about everything else on the operating system (files, programs, etc). It seems like AppLocker would be perfect for this.

However, I cannot get AppLocker to succesfully restrict a program. I wanted to test out restricting just one program, so I did the following:

1. Created a new, standard user account.
2. Enabled Executable Rule Enforcement.
3. Created a new rule that denys access to the individual executable file for the individual account.

However, when I log onto the other account, I am completely free to run the executable that I selected.

Does anyone know what I'm doing wrong? I'm using Windows 7 64-bit Pro, if that matters.

 

[Barman58]

you will have to check with the option list on the Microsoft website but I think that applocker only operates in enterprise or ultimate SKU's of win7

You could also have a look at parental controls as this should also allow you to restrict access to programs through a white/black list system for standard user accounts.

 

[Jforsyth]

you will have to check with the option list on the Microsoft website but I think that applocker only operates in enterprise or ultimate SKU's of win7

You could also have a look at parental controls as this should also allow you to restrict access to programs through a white/black list system for standard user accounts.

Oh, silly me.

AppLocker is available in all editions of Windows Server 2008 R2 and in Windows 7 Ultimate and Windows 7 Enterprise

That would explain it.

 

[Barman58]

I would definitely advise you have a look at the parental control option - it is a hidden gem of the win7 system - there is a lot of power to control the system built right into the OS

 

[Jforsyth]

Thanks for the help! It seems like I'll be able to do everything I wanted through the Parental Controls.