If you support Windows machines located in kiosks, libraries, community centers or other public places, it's probably a good idea to specify which applications users can run and which they can't. During this week's episode of TR Dojo, I show you how to use the Local Group Policy Editor to make Windows 7 run only the applications you approve.
Do you use use Group Policy, AppLocker, or a third-party utility to block users from running unapproved applications? Take the poll in the above post and let me know.
Original post and poll:
http://blogs.techrepublic.com.com/itdojo/?p=2065
Discussion on:
View:
Show:
...I found them to be more trouble than they were worth. My co-workers and boss at a school district that once employed me agreed. It was during that employment, dealing with high school miscreants, we learned just how good hard-drive protection is.
We made a few minor policy adjustments after that discovery for specific purposes but by and large we put that never ending battle to rest.
We made a few minor policy adjustments after that discovery for specific purposes but by and large we put that never ending battle to rest.
Both app locker and group policy have their weaknesses - Those users granted admin credentials can circumvent AppLocker allowing all applications to run and opening up the enterprise to serious security risks. Users running with standard user rights still need a solution to allow apps requiring admin rights to run/install without having the admin user name and passwords. see here http://bit.ly/aZYowf
We use a third-party utility called Inteset Secure Lockdown. It's perfect for running our kiosk type media app. It's cheap and works on Win 7 Premium too.
- Keyboard Shortcuts:
- Prev
- Next
- Toggle
