Improve Windows 7 security, use AppLocker

Many friends have installed various security software on their own computers, but do you know? With the growing variety of viruses and Trojans, especially some new viruses And Trojans often cause serious damage to users' interests before anti-virus software provides effective killing methods. When more and more important data and information are stored in computers, computer security issues are even more important. , then how to do it does not affect the normal operation of normal, but also can effectively prevent the operation of malicious programs? This requires the use of the Windows7 system's own security lock - AppLocker, together to understand it.

Enable AppLocker Don't forget to run the service

First, right-click on the computer, select “Manage →Services", find “Application Identity" service and set it to start automatically. This step is very important because AppLocker will only take effect if it is set to autostart.

Then type “gpedit.msc” in the search box in the Start menu to launch the Group Policy Editor. Expand “Computer Configuration →Windows Settings →Security Settings →Application Control Strategy”, you can see a related setting item called AppLocker.

After selecting this setting item, you can see the three types of "Executable Rules" and "Windows Installer Rules" and "Script Rules" in the right window. You can create a new rule by right-clicking on each rule, and you can create a corresponding action rule according to your needs.

Tip: The first time you use AppLocker, you must restart your computer after the configuration is complete to make the policy take effect.

牛刀小试 Let the flash virus have nothing to do

Usually we often use flash memory, use it to transfer or share some files. But now the flash virus is very rampant and often causes our system to be repeatedly poisoned. At this point we can use AppLocker to create a corresponding rule to avoid the destruction of the system by the flash virus. One of the key files for flash virus propagation is “AutoRun.inf”, so you only need to disable this file.

First, we select “script rule" in the left window list, then right click on the right window to select “create new rule"; then the system will pop up “ The window of the script rule & rdquo;. Select “Reject" in the "Actions" window, then select "Everyone" in the "Users or Groups" and click the "Next" button. Then select the “path” option in the window creation criteria, then click “Next”. Then type “?:\\AutoRun.inf” in the "path" box and continue to click the “Next” button. Since there are no other necessary operations in the back, just click the “Create” button to complete the rule creation. Now plug in the flash, it will not be poisoned by the automatic operation of the flash.

Tip: According to the above settings, the auto-run function of flash and disc will be disabled. If you only want to disable the auto-run function of flash, you only need to specify the drive letter of the flash. In addition, AppLocker can use the relative path or system variable of a file or folder in addition to the absolute path of the file or folder. For example, “%WINDIR%” represents the location of the operating system directory, and “%TEMP%” represents the current system default temporary directory. Previous12Next page Total 2 pages