Windows 7

Review, Page 2

Changing the Antivirus

During my Windows 7 "Release Candidate" trial/review I have had issues with the Trend Micro product so I switched to AVG. AVG 8.5(.364) has run perfectly on Windows 7, I have not experienced the same start-up and compatibility issues I had with the Trend Micro Antivirus.

AppLocker

This is a great utility in any environment. AppLocker gives you the ability to restrict the use of a file or program.

In this example I am going to show how given different users, on a computer or network (as this is part of Server 2008 as well), you may restrict users from a specific application. Say...anybody else from running an accounting program.

A good security practice is for everyone to use a "User account", Administrators included, and use the Run As command as needed. You will need Administrator privileges to run gpedit and set up AppLocker.

Windows 7, Hardware and Software Compatibility. What you need to know about XP Mode

To access AppLocker run gpedit.msc to begin the Group Policy editor.

Expand Computer Configuration and navigate to Executable Rules, right click and select Create New Rule.

In this case we are going to create a Deny rule.
For the user Deb on my W7test computer.

Applocker, Deny rule

Using the Browse Files option I selected the path to bittorent.exe

AppLocker, browse for a file

Here you see the summary...The default rules allowing general access to all resources and the one AppLocker Rule denying the user Deb from running Bit Torrent.

AppLocker, summary of rule

Windows 7, Page 1 - What works, What won't