Windows7 Practical tips for restricting program operation

If you do not want to let the office of colleagues on your computer running QQ or Ali Wangwang programs, but if you do not allow colleagues to install, will also hurt the gas, then how to do? We can limit the running of the specified program through Windows 7 system by using Windows 7 new AppLocker features (application control policies), you can use it to easily create restrictive policies for a program. Below let small make up to teach everybody concrete operation method.

For example, you want to ban QQ run, you can do this: Click start → type secpol.msc→ in the search for programs and files box Enter → open local Security policy → find application control policy →applocker→ right blank area right-click menu → create new rule → enter new Rule Wizard.

Permission step: The action is set to deny, and the user can select Everyone (all) or the specified account.

"Conditional" Step: the most safe way to do this is by the "publisher" condition, in other words, today's large software related programs are signed by the software publisher, using this rule, you can limit all the programs that have the signature, which avoids the "path" rule to modify the path to run, or " File Hash "The replacement version of the rule can be run by the circumvention method. For the convenience of demo, here we choose "Publisher".

"Publisher" Settings: "Browse" to find the main program Files QQ, after the selection will automatically appear the relevant information of the program, in the sliding button we choose "Publisher."

Exceptions setting: After the previous setup, all with Tencent official signature of the program will not be able to run, such as QQ, QQ Music, QQ audio and video, QQ games, such as Tencent series software, even contains the installation program, if you need to allow a separate program to run, you can add it as an exception to the program.

Name setting: The last step is to set the rule name, and you can help this rule with an easily identifiable name.

If you are currently creating the first rule, then there will be a default rule creation prompt when you are done, click "Yes" to allow the creation of default rules, lest you set rules that restrict system file programs.

When a rule is successfully created, the operation is intercepted when it is used to attempt to run any program with an official Tencent signature. This rule can take effect regardless of how the user changes the file path or version.

After Xiao Wang's explanation, Liu Manager soon mastered the use of AppLocker, he praised the small Wang said "good good, I want is this effect, it seems that Windows7 is really good." ”

Editor's note: If setting the AppLocker rule is invalid, click start → type services.msc→ in the search for programs and files box to press Enter → Open service, find the application identity entry, and set its startup type to "Automatic". Then press "Start" to allow the rule to take effect.