3 ms·
This might be the wrong venue but with the popularity of randomware and more complex malware attacks, I'm saddened that one of Microsoft's premiere safety techn
by Someone1234 8y ago
This might be the wrong venue but with the popularity of randomware and more complex malware attacks, I'm saddened that one of Microsoft's premiere safety technologies, AppLocker, is license restricted.
AppLocker is system-wide whitelisting for those unaware. You can restrict which executables can execute based on a number of criteria of your choosing.
At work I have access to AppLocker thanks to our Enterprise editions. But at home, when I'm setting up relative's PCs (or even my own) I am lacking one of the most powerful tools in my arsenal.
Microsoft should CONSIDER putting AppLocker in retail editions, Enterprise still has a huge number of benefits beyond that[0], and you'd still not be able to centrally manage it. It would make the world better/safer place.
Keep in mind that BitLocker used to be Enterprise edition only too, but Microsoft came around to realizing that it had huge benefits for all users. AppLocker is the same way.
[0] https://en.wikipedia.org/wiki/Windows_10_editions#Comparison_chart https://en.wikipedia.org/wiki/Windows_10_editions#Comparison...
- eat_veggies 8y agoDoesn't BitLocker only come with the more expensive pro release?
- ConceptJunkie 8y agoDo you mean "whitelisting" or is a term I've never heard of?
- Someone1234 8y agoThanks, typo fixed.
- rasz 8y agoThe second best thing you can do is Egress whitelisting. This can be done on stock W10 after disabling dnsmasq (dnsmasq acts as a hole thru windows firewall).