Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

App Locker Group Policy

Posted on 2011-09-28
4
Medium Priority
?
1,087 Views
Last Modified: 2012-06-27
I am trying to deploy App Locker via Group Policy on Windows 7 32-bit computers.  Our domain controllers are all Server 2003.  Using the WIndows 7 Group Management Console, I have setup an OU with the following article on how to setup App Locker.  http://www.grouppolicy.biz/2010/04/how-to-configure-applocker-group-policy-in-windows-7-to-block-third-party-browsers/.  In the OU, I have the computer and the user I want to apply the App Locker GP to.  Unfortunately, the GP won't apply.  I run gpresult, and I receive a message that the GP with the App Locker settings is "empty."  Any ideas how I can successfully apply the App Locker GP?
0
Comment
Question by:arkhaminmate11n
  • 3
4 Comments
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 36813007
Did you try to install Client Side Extension on your 2003 DC to be able to use GPPs on that DC?

For 2003 it can be downloaded from
http://www.microsoft.com/download/en/details.aspx?id=6955

Regards,
Krzysztof
0
 

Author Comment

by:arkhaminmate11n
ID: 36815026
Thanks.  I have not installed the extensions for 2003 Server.  Other Windows 7 Group Policies apply just fine, so I am not sure if the lack of Client Side Extensions is the problem.  Also, as a part of the same AppLocker GP, I have enabled the Application Identity Service.  This service is disabled by default on workstations.  On the test machine, the Application Identity Service is indeed running.  So the AppLocker GP is being applied, at least in part.  The only thing that isn't being applied is the AppLocker policy/rules.  Any ideas?
0
 

Accepted Solution

by:
arkhaminmate11n earned 0 total points
ID: 36816354
I figured out why AppLocker isn't working.  AppLocker does not work on Windows Professional- it will work on Windows Enterprise.  
0
 

Author Closing Comment

by:arkhaminmate11n
ID: 37087307
Question was answered.
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
Sometimes it necessary to set special permissions on user objects.  For instance when using a Blackberry server, the SendAs permission needs to be set. I see many admins struggle with the setting that permission only to see it disappear within a few…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question