Nov 30, 2009—Emerging Technology Series – Windows 7: A Security Perspective

by Ryan Spanier, Senior Information Security Engineer

As many of you know, Microsoft has released its newest workstation operating system: Windows 7. Along with a new look, this operating system has many new features that could help make your organization more secure, and that could possibly be a reason to upgrade your network. Here are a few of the main security improvements found in Windows 7:

• AppLocker – AppLocker allows administrators to define policies to allow or forbid users to run applications on their machines. This feature replaces software restriction policies currently in group policy. Policies can be defined for directories, program authors (such as Microsoft), program names, etc. The most secure use of AppLocker can forbid users from running all programs by default. Then administrators can create a white list of applications that can be run by users, thereby preventing unknown applications from running (such as malware or games, etc.). AppLocker policies can be applied in an “audit only” fashion initially, so that administrators can determine the exact effect the policies would have if they were enforced. AppLocker can be configured on an individual Windows 7 workstation through Local Security Policies, or applied using Group Policy in Windows Server 2008 R2. More resources:

AppLocker executive overview (http://technet.microsoft.com/en-us/library/dd548340%28WS.10%29.aspx)

Configuring AppLocker video (http://technet.microsoft.com/en-us/windows/ee412246.aspx)

To read the rest of this article, please contact your Gladiator Account Manager and ask to sign up for the Gladiator Technology newsletter, or you may subscribe to our newsletter by going to the bottom left-hand side of our Homepage and filling out the requested information.