Only problem is, once i deny those two rules. "all files located in the program files folder" and "all files located in the windows folder" This goal, by turning the "allow" on the two default rules that are being created the first time i apply applocker gpo : there are endless amount of apps i'd like to prevent. it's allot easier than having to insert denied apps
That way, i know i only allow a few apps to run in my domain, so i insert those allowed apps, and prevent all of the rest. instead of preventing only certain apps and having to insert them manually, why not block them all and insert the ones i permit? With Applocker (via gpo) and it is a great tool!
0 kommentar(er)
