As a systems admin, you might have probably wanted to deny your users to use a particular software application. This is pretty common since using some applications in some network environments is illegal.
In order to block an application, we can make user of a great feature called AppLocker available in Windows 7 and Windows Server 2008 R2. Here is a step by step guide on how to configure AppLocker in the domain or on computers in a special OU or site.
Let’s assume in this exercise you want to block the Chess game on all the computers in your domain.
First of all, on your DC you need to go to Administrative Tools and open up Group Policy Management console and then right click on the Default Domain Policy and click Edit to open Group Policy Management Editor.
Then here, under Computer Configuration go to Windows Settings -> Security Settings -> Application Control Policies -> AppLocker
Before anything right-click on AppLocker and click on Properties and then under Executable Rules, click on Configured and choose Enforce rules:
And then as shown in the below photo right click on Executable Rules and choose Create New Rule:
Once you click on Create New Rule, this window will open up and you just need to click on Next:
On the next Window, you will need to select which users or groups this rule applies to and whether you want the rule to allow users or deny them to use that application. Once Configured, click Next:
On the next window choose File Hash and then click Next:
On the next windows click on Browse Files and choose the program file and then click Next:
Give the new rule a name and then click Create:
Now the new rule must have been added under Executable Rules as shown below:
Now if anyone in the domain tries to open Chess from their computer, they will receive this message, meaning that Chess game has been blocked by a policy:
You want to learn more? Check out my new book below and have access to great and practical tutorials and step-by-step guides all in one book:
To get more information about the book click on the book below:
Good luck for the weekend