Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Windows 7 and Server 2008 R2 come with a security tool called Applocker. This allows admins to restrict applications to a specific white list which can be as granular as the individual application versions.

Apart from considerations of how practical this is to run, how much real world security would running a fairly tight config provide to an 'average' home system?

share|improve this question
up vote 7 down vote accepted

Whitelisting applications is a defense-in-depth measure. While it won't prevent a truly determined person from doing something nefarious, it will stop most people -- especially if users are running as non-admin.

Practicality is relative to your environment. If it's as you say, a home system, then the liklihood is that you don't have group policy in place. You would have to manage the configuration on each system manually.

share|improve this answer
default-deny for applications is very good idea and provides much higher security than having just antivirus and antimalware – Hubert Kario Jul 20 '11 at 6:41

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.