AppLocker Prevents Listed Applications From Running

It only works when it's running right? Because otherwise I can forsee trouble with people blacklisting this very app.

Can this be used on wgalogin.exe?

Not to be confused with AppLocker in Windows 7.

@arienh4: It looks like it doesn't actually run at all times. I loaded it up in a VM and it looks like what it does is basically set Applocker's core .exe as the debugger for the executable. The workaround that would most likely end up being used by end users is the same as you see when anything else is used to block processes by executable name - users just end up renaming the .exe if they can.

Monamo

I don't want to run another annoying little app to fix all the other annoying little apps that are bugging me. I'd rather find a way to fix the problem for good than add another doo-hickey.

smurph0404

I work in a calibration lab and I test several pieces of software, some of which will prevent the others from running properly, this app is very convenient and easy to use! Thanks LH!

Rezendes

Isn't there a way to use Local Security Policy settings to block an app from running? Seems to be a bit less hacky than this thing.

Yiding Jia

If you'd rather not install yet another app, you can do this manually...

WinXP Pro
1. Start -> Run -> Type "secpol.msc".
2. Right-click on Software Restriction Policy -> Create New Policies.
3. Right-click on Additional Rules (on the right) - Choose New Path Rule.
4. Now click Browse and find the executable you don't want to run.
5. Make sure the security level is set to "Disallowed" and click OK.

WinXP Home
1. Boot into Safe Mode ([F8]).
2. Login to the Administrator account.
3. Navigate to the executable.
4. Right-click on the executable -> Properties -> Security -> [Advanced].
5. In the Permissions folder, for all users:
6. Edit -> Traverse Folder / Execute File -> Deny -> [OK].
7. Reboot.

fiji.siv

@fiji.siv: How does one do this in Vista?

Odiase

@Dylan Boom: no, but adding
127.0.0.1 mpa.one.microsoft.com
to your hosts file works as a nice deterrant...

ComputerCarl

@fiji.siv: Also in Vista, is it possible to do this for apps that are loaded from my domain server (at work!)?

@Odiase: I'm using vista home basic, and I've use the second method to disable a splash screen for avira.

Does it work with Conficker?

@2-7offsuit is ioos: I wish!

Guymann

@goodywitch: Even with the new avira 9?

VrilDox

@goodywitch: Awesome! Thanks!

Odiase

@VrilDox: yup.

Erm, well, not the STARTUP screen, but the nag screen.

Anyone know of a prog that does the opposite, i.e only allows a whitelist of accepted applications to run?

snze

"Whether you'd like to prevent Internet Explorer from running because you can't uninstall it to get rid of it..."

First of all, Internet Explorer doesn't autorun unless it's set to open windows from apps automatically, and that setting can be tweaked rather than employ this thing. It's like using an ax when all you need is a ...toothpick.

Second of all, searching for and running spunist.exe/ie/"whatever IE version number here" works when the IE entry is missing. Show me a copy of IE that you can't uninstall, and I will show you a copy of WinSP3 installed *after* a copy of IE 8 was.

emnem

P2Hitman ( available from [P2Labs.com] ) checks for any executable every 100ms and terminates it. Very powerful and free...

Aren't free Windows utilities great? :)...

Wish I would of had this for apple fools.

Branden Silva

Comodo Firewall includes a free tool called Defense+, with it you can deny access to screens, keyboards, registry files - but most importantly you can also prevent applications from running.

iiwkala

what about using msconfig? Most of the start-up program are listed in the start-up tab in system configuration. Just uncheck that apps and reboot.

LarinaVarro

Any good hosts intrusion protection system (HIPS) utility will either block (blacklist) or allow (whitelist) anything one wants... ...and it's just a thought, but one-third of one of the best free internet security suites out there is a fabulous HIPS component that easily allows either blacklisting or whitelisting of any program... and I stress the word "easily." I don't work for or have anything to do with the company that makes it. I'm just sold on it, and am simply sharing, here, my thought that the "Defense+" part (the HIPS component) of the free COMODO INTERNET SECURITY suite would fill the bill nicely. Using that product for this purpose has the added benefit of it (if you'll allow it) becoming your system's firewall and anti-virus product. One nice thing about the COMODO suite is that the firewall and anti-virus features can be turned off if you like, leaving only the HIPS component... which could provide more than just blacklisting and whitelisting if allowed to constantly monitor and alert if something suspicious tries to launch itself. Just my $.02 worth... for whatever it's worth.

ChandlerKabolla

@emnem: I faced a problem with a virus/worm/something which was popping up ads on Internet Explorer every few minutes while I was using the computer. My temporary fix was to deny IE access to the internet through the firewall. This app would have been good to know off back then, but even better would have been if I'd known about the Windows security policies for blocking programs (not that I can find it now in my Vista Home Premium).

@smurph0404: yeah, but this seems like it might be useful in testing which application is causing the problem
or, for when i'm working on a client's computer and want their AIM/MSN/etc windows from loading when i'm using their computer without having to uninstall/toy with config