What is the minimum version of Windows 7 that supports AppLocker?

[dc2000]

Hi everyone:

I need to lock down our work computer (enable white-listing to run only apps with specific digital signatures) and I'm wondering where can I buy Windows 7 that supports App Locker feature? I need it only for one PC.

 

[samuria]

AppLocker requirements

AppLocker is available in all editions of Windows Server 2008 R2 and in Windows 7 Ultimate and Windows 7 Enterprise. To use AppLocker, you need:

• A computer running Windows Server 2008 R2, Windows 7 Ultimate, Windows 7 Enterprise, or Windows 7 Professional to create the AppLocker rules. Windows 7 Professional can be used to create the rules, but the rules cannot be enforced on computers running Windows 7 Professional. The computer can be a domain controller.
• For Group Policy deployment, at least one computer with the Group Policy Management Console (GPMC) or Remote Server Administration Tools (RSAT) installed to host the AppLocker rules.
• Computers running Windows Server 2008 R2, Windows 7 Ultimate, or Windows 7 Enterprise to enforce the AppLocker rules that you create.

 

[dc2000]

Thanks. I know that it sounds like a simple question, but where can I get Windows 7 Ultimate, or Windows 7 Enterprise? I can't seem to find any place where I can buy it?

 

[Barman58]

You will need to contact your Microsoft Partner who supplies your company with software licensing, I'm not sure if the Ultimate version will be available but Enterprise should be although with Windows 7 now out of support and not being sold to retail customers I'm not sure of minimum licence quantities to businesses, you may be able to upgrade some of your existing licences to Enterprise

 

[dc2000]

You will need to contact your Microsoft Partner who supplies your company with software licensing, I'm not sure if the Ultimate version will be available but Enterprise should be although with Windows 7 now out of support and not being sold to retail customers I'm not sure of minimum licence quantities to businesses, you may be able to upgrade some of your existing licences to Enterprise

We got it from Dell, but it was a Windows 7 Pro. I couldn't install AppLocker on it then. Now we have malware on it so I need to reinstall everything & do it right this time. That is why I was hoping to get Windows 7 Ultimate.

 

[Barman58]

Windows 7 Ultimate was always a specialist version of Windows, It was basically a rebranded Enterprise aimed at Independent technicians who did not have a need for Volume licensing but needed access to the enterprise features for testing and maintenance purposes, It was also available to Technet & MSDN subscribers so did find it's way onto Enthusiast's systems and was sold is very small quantities as stand alone Retail copies.

Unfortunately as Ultimate was the most pirated version of Windows 7 the copies were quickly withdrawn from sale when Windows 7 Reached End of Support.

You could try contacting Dell to ask if they can still supply an upgrade or if you have an extended warranty with Microsoft they may be able to help

 

[dc2000]

Thanks. I just chatted with a tech support at Dell and here's what the guy told me:

"I am sorry we do not sell Windows 7 ultimate 64 Bit DVD or download. I would recommend you to contact Microsoft directly."

Then the same question to Microsoft and here's their answer:

"Windows 7 is no longer available here in the website. What we currently have is the Windows 10"

Guys, how dangerous is it to buy Win7 Ultimate on a DVD off of eBay? A guy is selling supposedly sealed one for $70 USD.

 

[samuria]

If you buy off ebay and pay with paypal at least if its wrong you can get your money back

 

[Alejandro85]

Effectively, as said by others, you need at least Ultimate, the most expensive edition, and it's almost impossible to find a legitimate one out there (don't bother with the disc, these can be downloaded, search for buying a legitimate serial instead, that's the real value, BTW).

Even if you decide to downgrade to Windows 10, AppLocker has been completely removed and only available in the Enterprise edition, not in Pro (equivalent of Win7 Professional and Ultimate).

As an immediate alternative, you can look at Software Restriction Policies, the "little brother" of AppLocker that supports a subset of its features and is available since the Professional edition. Not an ideal solution, but maybe suffices for your case.

 

[dc2000]

Thanks, guys.

Yeah, I tried using software restriction policies before. Unfortunately they are nowhere as good as AppLocker. I had a good success rate locking the system down with it on an Active Directory domain before. Unfortunately we're talking about a small business here, so there's no way they can afford paying that kinda Windows license.

And yes, I understand that someone can counterfeit a DVD. But the same applied to a serial number. I mean if I buy one where would I download legitimate copy of Windows 7 Ultimate from? Microsoft doesn't have it on their servers anymore. Plus how would I know that the key is legit?

 

[dc2000]

Guys, just to follow up. DO NOT buy any software from eBay. Luckily I did my research and no! It's mostly Chinese fakes. Search YouTube for Windows 7 Ultimate fake key and it will come up with a bunch of videos. Most people say that their copy on Windows bought off eBay activated and worked for about 6 months and then Microsoft canceled the registration key. At which point they can't return it anymore. And unfortunately there's no site that Microsoft provides that could let someone check if a specific product key is valid or not.....

So yeah, I'm stuck! Will have to probably go with Windows Server 2016 Essentials. It's $560. Ouch!