Solved

App Locker Group Policy

Posted on 2011-09-28
4
992 Views
Last Modified: 2012-06-27
I am trying to deploy App Locker via Group Policy on Windows 7 32-bit computers.  Our domain controllers are all Server 2003.  Using the WIndows 7 Group Management Console, I have setup an OU with the following article on how to setup App Locker.  http://www.grouppolicy.biz/2010/04/how-to-configure-applocker-group-policy-in-windows-7-to-block-third-party-browsers/.  In the OU, I have the computer and the user I want to apply the App Locker GP to.  Unfortunately, the GP won't apply.  I run gpresult, and I receive a message that the GP with the App Locker settings is "empty."  Any ideas how I can successfully apply the App Locker GP?
0
Comment
Question by:arkhaminmate11n
  • 3
4 Comments
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 36813007
Did you try to install Client Side Extension on your 2003 DC to be able to use GPPs on that DC?

For 2003 it can be downloaded from
http://www.microsoft.com/download/en/details.aspx?id=6955

Regards,
Krzysztof
0
 

Author Comment

by:arkhaminmate11n
ID: 36815026
Thanks.  I have not installed the extensions for 2003 Server.  Other Windows 7 Group Policies apply just fine, so I am not sure if the lack of Client Side Extensions is the problem.  Also, as a part of the same AppLocker GP, I have enabled the Application Identity Service.  This service is disabled by default on workstations.  On the test machine, the Application Identity Service is indeed running.  So the AppLocker GP is being applied, at least in part.  The only thing that isn't being applied is the AppLocker policy/rules.  Any ideas?
0
 

Accepted Solution

by:
arkhaminmate11n earned 0 total points
ID: 36816354
I figured out why AppLocker isn't working.  AppLocker does not work on Windows Professional- it will work on Windows Enterprise.  
0
 

Author Closing Comment

by:arkhaminmate11n
ID: 37087307
Question was answered.
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
Synchronize a new Active Directory domain with an existing Office 365 tenant
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now