Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

The goal is to prevent users from running unwanted programs on a terminal server.

I have read many articles from Microsoft and others saying that the new Applocker feature is 100% better than the old Software Restriction Policy and is recommended as a replacement of latter.

I am not sure to understand the real advantages of Applocker apart from the kernel mode execution. The most of its functionnalities can be reproduced with Software Restriction Policy.

At the same it has one BIG disadvantage that make it pretty useless: it is not extensible, and you cannot add custom file extensions that you want to restrict.

What are advantages of Applocker over SRP and what would you recommend for software control?

share|improve this question
    
File Extension restrictions are somewhat useless as there are quite a few ways around it. It might keep out people who don't know what they're doing, but if you think it's going to stop virii or corporate espionage, you're barking up the wrong tree. Did you see any other disadvantages?? –  Chris S Nov 9 '12 at 13:59
    
Have a look here: technet.microsoft.com/library/hh994614 –  joeqwerty Nov 9 '12 at 18:09

2 Answers 2

I agree that SRP has some additional features that AppLocker could really benefit from.

That being said, I see the big benefits of AppLocker (as documented by this comparison) as:

  • AppLocker rules can be targeted to a specific user or a group of users, whereas SRP is enforced on the whole computer.
  • AppLocker supports audit mode so that rules can be tested in production before being enforced. SRP doesn't have an equivalent log-only mode.
share|improve this answer

The biggest advantage for me is the ability to whitelist signed executables by publisher. Have a look at this http://technet.microsoft.com/en-us/library/ee460943(v=ws.10).aspx

share|improve this answer
1  
A bit more detail would make this a better answer going forward. A link can change and make the answer less useful. Asdding some detail from the linked material would help –  Dave M Feb 19 '13 at 18:51

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.