Win7 How to Restrict program operation

If you do not want to let the office of colleagues on your computer running QQ or Ali Wangwang programs, but if you do not allow colleagues to install, will also hurt the gas, then how to do? We can limit the running of the specified program through Windows 7 system by using Windows 7 new AppLocker features (application control policies), you can use it to easily create restrictive policies for a program.

For example, you want to ban QQ run, you can do this: Click start → type secpol.msc→ in the search for programs and files box Enter → open local Security policy → find application control policy →applocker→ right blank area right-click menu → create new rule → enter new Rule Wizard.

Permission step: The action is set to deny, and the user can select Everyone (all) or the specified account.

"Conditional" Step: the most safe way to do this is by the "publisher" condition, in other words, today's large software related programs are signed by the software publisher, using this rule, you can limit all the programs that have the signature, which avoids the "path" rule to modify the path to run, or " File Hash "The replacement version of the rule can be run by the circumvention method. For the convenience of demo, here we choose "Publisher".

"Publisher" Settings: "Browse" to find the main program Files QQ, after the selection will automatically appear the relevant information of the program, in the sliding button we choose "Publisher."

Exceptions setting: After the previous setup, all with Tencent official signature of the program will not be able to run, such as QQ, QQ Music, QQ audio and video, QQ games, such as Tencent series software, even contains the installation program, if you need to allow a separate program to run, you can add it as an exception to the program.

Name setting: The last step is to set the rule name, and you can help this rule with an easily identifiable name.

If you are currently creating the first rule, then there will be a default rule creation prompt when you are done, click "Yes" to allow the creation of default rules, lest you set rules that restrict system file programs.

When a rule is successfully created, the operation is intercepted when it is used to attempt to run any program with an official Tencent signature. This rule can take effect regardless of how the user changes the file path or version.

If setting the AppLocker rule is not valid, click start → type services.msc→ in the search for programs and files box to press Enter → Open service, find the application identity entry, and set its startup type to Automatic. Then press "Start" to allow the rule to take effect.