0
I have my someones computer that I regularly fix up for him, usually because the people come and download illegal programs and porn. I'm getting really tired of it and am looking for a way to whitelist a very small list of programs, firefox, word, etc, that can run, and nothing else. I found the AppLocker for the corporate world, but is there anything similar for a family computer?
Andrew Redd
Posted 2010-07-25T22:25:09.713
Reputation: 1 294
0
After trolling around in the settings I found the Parental Controls actually allow for both a white list and black list, but it seems that the settings are a little time consuming to set up. But you can only set up the controls for a regular user.
http://windows.microsoft.com/en-us/windows7/Prevent-children-from-using-specific-programs
Andrew Redd
Posted 2010-07-25T22:25:09.713
Reputation: 1 294
2
To stop people installing pretty much anything set them up a user level account rather than an admin level account. If they insist on letting others use their computer then can give this account out.
A more drastic way would be to set up a virtual machine which could be wiped and restored as necessary.
However, neither of these would stop the downloading of the files themselves.
ChrisF
Posted 2010-07-25T22:25:09.713
Reputation: 39 650
It will also not stop some portable applications like from PortableApps.com – Andrew Redd – 2010-07-25T23:51:05.787
@Halpo - you're right it won't. But setting up your users with standard accounts is still the first step. – Joel Coehoorn – 2010-07-26T00:57:33.857
1AppLocker is a much tighter sandbox than just running LUA. It prevents untrusted code from executing at all. You can control the execution of binaries, DLL loading, scripts and installers. That means that malware targeting the user profile rather than going admin permissions will not execute. AppLocker is a really cool security feature and it's the main reason to prefer Enterprise and Ultimate SKUs. I'd like to see MSFT put AppLocker in all SKUs, enable it by default. They need to put a simpler management interface on it for the home user, though. – Brian Reiter – 2010-12-01T10:55:37.547