Using local policy Editor to protect Win7 system security

We will inevitably encounter some viruses when using the WIN7 flagship system, these viruses are not very serious, usually anti-virus software will isolate them, and do not immediately delete them directly, so users can also find the existence of these virus files. So, when we encounter these viruses, it is best to use the local security policy to effectively isolate the virus.

The specific method of operation is as follows:

1. Open the Run window in the Start menu, enter the Secpol.msc command and return, and open the local group security policy. Next, locate the application control policy-"AppLocker"-"executable rule" in the local group security policy, and on the executable rule, right-click to select "Create New Rule";

2, and then in the creation of a new rule interface to execute the new Rule Wizard. In the following interface, select permissions, then select Reject at the operation and select Everyone in the user or group.

3, then in the left pane to select "Conditions" in the conditional interface, set the "Limit" path, click to enter the next step, in the Browse File button to select the virus file, and then click the Create button;

4. After creating the default rules, prevent system file programs from being restricted.

There are many ways to protect and killing viruses, and each has its own advantages, the use of Win7 system local policy isolation virus is only one of the protection methods, we believe that after learning will also be useful to the day.