Guidelines For Designing Software Restriction Policies To Manage Application Usage

By Author: unknownmem
Total Articles: 127
Comment this article

This topic explains what software restriction policies are, provides the Designing exam(http://www.mcse-70-297.com)
you must answer during the design process, describes the types of software restriction policies there are, and then provides guidelines for designing these policies.
What Are Software Restriction Policies?
Software restriction policies are tools in Group Policy that can be used to restrict or allow software to run on Windows XP Professional computers, Windows Server 2003 computers, or both. These policies do not have anything to do with software configuration; they simply determine whether or not the software will run. A single software restriction policy can be created in a GPO, but each policy can have multiple rules. Designing software restriction polices is a two-part process. First, the general properties of the policy must be designed, and then the policies themselves must be designed.
Considerations
There are five major questions to answer in the design process for the security+ certification(http://www.upcert.com)
software restriction properties.
Should the Security ...
... Level be unrestricted or disallowed? Software restriction policies, by default, allow all software to run, as shown in Figure 11-14. You must configure a policy to prevent software from running. But is this the way it should be? Should you allow all applications to run (the Unrestricted Security level) and then deny through a policy the few that should be allowed to run? Or should you allow no applications to run (the Disallowed Security Level) and allow applications to run in a policy?
After policy is designed, the rules themselves are designed. If the security level will be unrestricted (the default), then you write policies that will prevent software from run?ning. If the security level will be disallowed, you must write policies that will allow software to run.

Important To include CompTIA A+( http://www.upcert.com/comptia_promo/)
software restriction rules, you must configure the Security Option, System Settings: Use Certificate Rules on Windows executables for software restriction policies.