The goal is to prevent users from running unwanted programs on a terminal server.
I have read many articles from Microsoft and others saying that the new Applocker feature is 100% better than the old Software Restriction Policy and is recommended as a replacement of latter.
I am not sure to understand the real advantages of Applocker apart from the kernel mode execution. The most of its functionnalities can be reproduced with Software Restriction Policy.
At the same it has one BIG disadvantage that make it pretty useless: it is not extensible, and you cannot add custom file extensions that you want to restrict.
What are advantages of Applocker over SRP and what would you recommend for software control?