We are starting to look at Windows 7 and how to deploy it in our environment. If you open up gpedit.msc on Windows 7 and drill down to computer configuration\windows settings\security settings\application control policies you see AppLocker.

We also run all company wide GPO's from our Windows 2008 file server. On our 2008 file server we launch %SystemRoot%\system32\gpmc.msc (group policy manager) and AppLocker does not exist. The closest thing is computer configuration\windows settings\security settings\software restrictions policies

So it seems that the GPO's on Windows 7 are ahead of server 2008. Is there an update to server 2008 to have matching GPO's on your server and Windows 7?

Or another question is how are other companies using AppLocker via GPO's when their servers are 2008?
0 Comments   [ + ] Show Comments


Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.


I saw this video just this morning on my RSS feed from the Microsoft Group Policy Team Blog... Basically the GPMC in Windows 7 is the same as the GPMC in Server 2008 R2, but the older Server 2008 used a different version. Here is the video: http://blogs.technet.com/grouppolicy/archive/2009/12/23/how-to-install-rsat.aspx
Answered 12/28/2009 by: riversidekid
Senior Yellow Belt

Please log in to comment
According to this, you should see AppLocker in 2008, but 2008 R2. Do you a) have R2 and b) are you looking at the policies at a local level or domain level?
Answered 12/28/2009 by: VBScab
Red Belt

Please log in to comment
Answer this question or Comment on this question for clarity