How to restrict software running by applying program control policies?

1, open the Control Panel, select the Management tool. As shown in the following illustration:

2, select the Local security policy. As shown in the following illustration:

3, open the Local security policy, open the "Application Control Policy"-click "Applocker". As shown in the following illustration:

4, open the Applocker after the following figure:

5, before setting the rules to confirm the application Identity service is set to automatically start, only the service started, Applocker set before the effective, open method with step 1, open the search after the input "Services.msc", open the Service settings interface. As shown in the following illustration:

6, select Automatic, click Start. As shown in the following illustration:

7, you can set up a specific project, the first choice to configure the mandatory rules. As shown in the following illustration:

8, you can see the Mandatory tab, you can set whether each rule collection enforces AppLocker rules, which have mandatory rules and only two, and are set to enforce rules that are enforced, set to audit only, and are recorded in the log after the rules are in effect, but do not actually take effect. As shown in the following illustration:

9. To set executable rules as an example, select the executable rules in the Applocker interface. As shown in the following illustration:

10, right click to choose to create a new rule. As shown in the following illustration:

11, click "Next". As shown in the following illustration:

12. Set whether the rule is allowed or denied, and you can select the user or group of users to target. As shown in the following illustration:

13, set conditions, the conditions are divided into three, the Publisher, path and file hashes, based on the needs of choice. As shown in the following illustration:

14, in file hashing as an example, the Notes mailbox program is disabled. First select the file hash as shown in the following illustration:

15, select the application set rules, to "Notes.exe" as an example, select the next step after the click. As shown in the following illustration:

16, enter the rule name and the corresponding description, click Create. As shown in the following illustration:

17, the Rules of Procedure have been established, restart after the entry into force.