8.6. Software Restriction Policy
Windows XP and newer machines have a CSE (Client Side Extension) that Windows 2000 doesn't have: Software Restriction Policies. Software Restriction Policies enable you, the administrator, to precisely dictate what software will and will not run on your Windows XP desktops.
Many viruses show up in your users' inboxes as either executables or .VBS scripting files. Just one launch within your confines, and you're cleaning up for a week. Additionally, users will bring in unknown software from home or download junk off the Internet, and then, when the computer blows up, they turn around and blame you. What an injustice!
To that end, Microsoft developed Software Restriction Policies, which can put the kibosh on software ...
Get Group Policy: Fundamentals, Security, and Troubleshooting now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
