Why don't I use Windows Software Restriction Policies?

[Andy Ful]

From the technet.microsoft.com :

"Software Restriction Policies (SRP) is Group Policy-based feature that identifies software programs running on computers in a domain, and controls the ability of those programs to run. Software restriction policies are part of the Microsoft security and management strategy to assist enterprises in increasing the reliability, integrity, and manageability of their computers.

You can also use software restriction policies to create a highly restricted configuration for computers, in which you allow only specifically identified applications to run. Software restriction policies are integrated with Microsoft Active Directory and Group Policy. You can also create software restriction policies on stand-alone computers. Software restriction policies are trust policies, which are regulations set by an administrator to restrict scripts and other code that is not fully trusted from running."

Software Restriction Policies
Software Restriction Policies Technical Overview
How Software Restriction Policies Work: Group Policy
Using Software Restriction Policies to Protect Against Unauthorized Software

 

[509322]

@Andy Ful - great poll and thread

"It can block something important and hang the system." - a user would have to disable critical Windows processes within the SRP - ignoring any notifications that the created policy might cause serious problems - for this to happen = user mistake

Default SRP policies won't smash any Windows system. Someone please explain to me the logic here ? What's the point of creating a SRP only to have a user install or enable it and then - because of the default policy - the SRP smashes the system ? Now that would be complete stupidity...

"It is useless for inexperienced users." - this is patently false; people that know zero - nada - zilch - about SRP use it without incident

 

[Andy Ful]

"It is useless for inexperienced users." - this is patently false; people that know zero - nada - zilch - about SRP use it without incident

I agree. My friend is a good example.

 

[Reldel]

I've used SRP on various family computers since Windows 7 (all now on Windows 10) experienced and inexperienced users and none of the computers/users have had problems using it. More importantly none of the computers has had any infections, pups, malware or ransomware. A believer.

Hats off to mechBgon.

 

[509322]

Hats off to mechBgon.

Good basic, thorough guide

 

[SHvFl]

I have other ways to control program execution so that's why i don't use it.

 

[Andy Ful]

Hats off to mechBgon.

That's where I first read about SRP a few years ago.

 

[509322]

I have other ways to control program execution so that's why i don't use it.

You use a different, but equally powerful, alternative. You know what you're doing. You are not paranoid. That adds up to a simple, but effective formula of system protection.

 

[509322]

Double post.

 

[marzametal]

HAHA @ @SHvFl liking a double post!

Now that made me laugh, thanks... just what I needed today!

 

[509322]

HAHA @ @SHvFl liking a double post!

Now that made me laugh, thanks... just what I needed today!

He 'Liked' my technical problems with MT today - and doesn't even know it.

 

[SHvFl]

HAHA @ @SHvFl liking a double post!

Now that made me laugh, thanks... just what I needed today!

He 'Liked' my technical problems with MT today - and doesn't even know it.

Both correct because i don't read the replies if i am not interested but like them if it's from someone i am aware for support reasons. I am not cheap with likes, they are free.

 

[509322]

I am not cheap with likes, they are free.

You're a stronger person than I. I am too lazy to push the button.

 

[509322]

"It is not user friendly" -- that can mean a lot of different things, but still, I didn't know that an ON-OFF button could be user unfriendly.

"It is too complicated" -- I can understand why some users would think this, but it just ain't that complicated

 

[Andy Ful]

Maybe the the answer should be corrected:
It is too complicated in Windows Home.
I am curious, why the double posts cannot be deleted?

 

[509322]

Maybe the the answer should be corrected:
It is too complicated in Windows Home.
I am curious, why the double posts cannot be deleted?

I think "It's too complicated" pretty much sums up some users' perspectives on SRP - most of them without ever having used it.

Staff removed the option to delete posts.

 

[SHvFl]

Staff removed the option to delete posts.

They didn't actually. It seems to have requirements. For sure when you are trusted you can do it and i would assume developers can also so contact an admin i guess.

 

[509322]

They didn't actually. It seems to have requirements. For sure when you are trusted you can do it and i would assume developers can also so contact an admin i guess.

No, I can't do it. Button not there. So I assumed it was removed since the site is constantly evolving. Thanks for the correction.

 

[SHvFl]

No, I can't do it. Button not there. So I assumed it was removed since the site is constantly evolving. Thanks for the correction.

You had a previous trusted account so you are allowed to get it on this account. They just have to put you again in the list and i have seen other people doing it. I would contact someone if i was you. Probably @Jack

 

[509322]

You had a previous trusted account so you are allowed to get it on this account. They just have to put you again in the list and i have seen other people doing it. I would contact someone if i was you. Probably @Jack

Thanks for the infos.