Windows 7 and AppLocker
Source: Global Knowledge
AppLocker represents some significant improvements to Software Restriction Policies. The ability to use digital signature information, the ability to use greater-than and less-than operators for version numbers, letting administrators create rules based on group membership, and being able to autoscan a "standard" workstation to automatically generate rules for all certified applications, all work together to reduce some of the key objections to SRPs in Server 2003 and Server 2000. Of course, AppLocker isn't perfect. And there are several things to consider before deciding to leverage it. This white paper introduces you to AppLocker and makes a few key points about how it differs from earlier software restriction technologies.