Windows7 limits the practical skills of running programs

If you don't want your office colleagues to run QQ or Ali Wangwang on your computer, but if you don't let your colleagues install it, you will be hurt. What should we do? We can restrict the specified program through Windows 7 system. Run, by using the new AppLocker feature (application control policy) of the Windows 7 system, you can use it to easily create a restriction policy for a program. Let Xiaobian teach you the specific operation method below.
For example, if you want to ban QQ running, you can do this: Click “Start”→ in the "Search programs and files" box type secpol.msc→ press Enter → open local security policy → Find the application control strategy → AppLocker & rarr; right blank area right-click menu → create a new rule & rarr; enter the new rules wizard.


& ldquo; rights & rdquo;: operating a set & ldquo; & rdquo ;, reject the user can select & ldquo; Everyone (all people) & rdquo; or a designated account.



































With this rule, you can restrict all programs that have the signature, which avoids the "path" rule's modified path to run, or the "file hash" rule can be run by another version of the rule. . For the convenience of presentation, here we choose “publisher”.

“Publisher"Settings:"Browse"> Find the main program file of QQ.

 Exceptions  Settings: After the previous step, all programs with Tencent official signatures will not run, such as QQ, QQ music, QQ video, QQ games, etc. The installer, if you need to allow a program to run separately, you can add it as an exception here.

“Name”Settings: The final step is to set the rule name. You can help this rule get an easy-to-recognize name.

If you are currently creating the first rule, then there will be a default rule creation prompt after completion, you need to click “ is ”, allow the creation of default rules, so that you do not set the rules to make the system The file program is restricted.

After successful creation of a rule, when attempted to run any program with Tencent's official signature, the operation will be blocked. This rule works regardless of how the user changes the file path and version.

After Xiao Wang’s explanation, Manager Liu quickly mastered the use of AppLocker. He praised Xiao Wang and said, “It’s good, I want this effect. It seems that Windows 7 is really Very good. ”
Editor's Note: If the AppLocker rule is invalid, click “Start”→ in the <quo;Search Programs and Files" box, type services.msc→ press Enter→open“service&rdquo ;, find the Application Identity item, set its startup type to “automatic", then press “start” to make the rule take effect.