In the office, your computer is often messed up by colleagues or other people. They play the game you play, and even more install some other software on your computer, how can a vulnerable system survive? In fact, using group policies can easily solve these two problems.
Tip: Enter gpedit. msc in "Start/Run" to open "Group Policy Editor ".
1. only run the specified program. In the Group Policy, choose "Local Computer Policy/user configuration/management template/system", and find "run only licensed Windows Applications" on the right of the window ", set it to "enabled", click "show" (1), and then click "add" in the "show content" dialog box, finally, enter the program name that can be run in the "add project" window, and then "OK. You can add multiple Windows applications that are allowed to run with the same magnification.
2. Do not install software at will. In the Group Policy, open "user configuration/management template/Windows component/Windows Installer", and find the "Block media source for any software" option on the right of the window, set it to "enabled" (2) and click the "application" button to Disable software installation on your computer.
Tip: This method is only valid for software that uses the Windows Installer installation engine.