Windows 7 Thread, For the love of God. Why is Applocker not available on windows 7 Pro? in Technical; I spent a good half a day banging my head against the desk as I just couldn't get Applocker to ...
26th March 2012, 02:52 PM #1
For the love of God. Why is Applocker not available on windows 7 Pro?
I spent a good half a day banging my head against the desk as I just couldn't get Applocker to block access to apps no matter what I tried. I then stumbled across the fact that it doesn't work in Windows 7 pro. Nice one MS. Why would anyone running Pro need it? Huh?
Thanks to reggiep from:
TechMonkey (27th March 2012)
IDG Tech News
26th March 2012, 03:45 PM #2
Aye, you're correct.
Looks like you'll need to get Software Assurance so that you can run enterprise.
26th March 2012, 04:06 PM #3
Yeh it should be on both tbh but I find SRP better anyway.
26th March 2012, 04:18 PM #4
As far as I understand Windows 7 Pro is designed for SMBs and home users who want network backup/file sync ect.
Enterprise is the one schools should be looking at with things like App Locker (as you found out) and Bitlocker ect...
After all under EES its cheap as chips
27th March 2012, 08:48 AM #5
Yea, thats why they put out Enterprise any why it bugs the hell out of me when I have to clean up after someone who installed pro sitewide for some weird reason when using a schools agreement which gives access to Enterprise. I've had to reimage two sites thanks to this so I could use bitlocker.
27th March 2012, 08:56 AM #6
Yep, We fell for it and have made an image ready to roll out to our new domain with Pro. Now we have to start again as there is no upgrade path. Unless anyone know differently!
27th March 2012, 09:20 AM #7
Well it is no help to you but thanks for posting as it'll stop me from falling into the same trap
10th April 2012, 11:33 PM #8
- Rep Power
As someone who fell for it I'll tell you how. In the Volume Licensing portal Microsoft chose to list Windows 7 Pro filed under 'Windows', just as all versions of Windows Vista (inc. Enterprise) had been.
Originally Posted by SYNACK
However, for some unknown reason they decided to list Windows 7 Enterprise under the category 'Software Assurance Benefits' several pages in, IIRC. So early adopters of Windows 7 were left assuming that maybe they had re-jigged which editions a Select Agreement customer was entitled to. After all, the Volume Licensing portal was unlikely to be wrong, right? And you could clearly see that Vista had been laid out sensibly.
So I installed 150 Windows 7 Pro workstations by accident too. Luckily, they're all being replaced this summer anyway. While I was researching (in vain) how to in-place upgrade them I found a post by some poor guy who had accidentally rolled out over 1,000 Pro machines at a university. Poor bloke
Last edited by patters98; 10th April 2012 at 11:51 PM.
Thanks to patters98 from:
Oaktech (11th April 2012)
11th April 2012, 08:47 AM #9
Yes, yes it was... We rolled out 80 machines at a primary school for this very reason. It's reimage time in the summer when we make the new domain live.
Originally Posted by patters98
11th April 2012, 09:23 AM #10
Thank goodness I look at edugeek regularly. I have just fallen into this trap but I am only in the testing phase of setting up MDT to do all the hard work. It was going well until now, but it will give me a chance to tidy a few things up.
11th April 2012, 09:31 AM #11
wow, I'm about to pushout 7pro! I'll have to rethink it now. I'm on EES and asumed I only had 101 Enterprise installs (101FTE count) am I wrong?
11th April 2012, 10:36 AM #12
Not exactly, with EES you get two keys - one a KMS key for key management services and a MAK key which as you have noticed is limited to 100 initially but you can go back to microsoft for more if you want to run just with MAK keys. The expected method of activation for Win 7 Pro or Enterprise is via KMS ( which is how it works out of the box) but you can force it to use a MAK key. To get KMS validation to work you need a server running 2008 R2, 2008 or 2003 Sp1 with additions. If you are using server 2008 R2 you will need a KMS key running rather than the OEM MAK key. I have found this out the hard way. You will need at least 25 clients loaded before it will validate but once it reaches the 25 bingo they will all validate at once.
If you need any other info there are lots of posts here about this and the help system on the licencing portal is very goog as well ( except for the bit about needing your KMS host server running with a KMS licence.
Just reread my notes I think it may also be possible to run Win 7 as a KMS host.
Thanks to Hedghog from:
chazzy2501 (11th April 2012)
11th April 2012, 11:06 AM #13
You can install on as many machines as you want (well machines with a windows licence).
Originally Posted by chazzy2501
Thanks to sparkeh from:
chazzy2501 (11th April 2012)
11th April 2012, 11:49 AM #14
- Rep Power
Hi, a great alternative is ProgramKiller, that is if you don't want the hassle of changing every single installation on your network. It's a free download from: Cool Solutions: Program Killer . I would use this tool if you don't want to use software restriction policies or applocker. The tray icon can be hidden and configuration can be loaded from a network share, as configuration is stored in a text and batch file it's easy to update. the only problem is that the program can be circumvented if a user re-names an executable. I would say this program is useful for blocking Windows built in applications such as Games.
9th May 2013, 09:14 AM #15
- Rep Power
Yes it's a bit weird I see this is the same for Windows 8 Windows 8 editions - Wikipedia, the free encyclopedia, they give you AppLocker for all server editions.
It's a bit counter intuitive as Pro supports GPO and it's a core GPO setting.
By Jake in forum Office Software
Last Post: 27th September 2010, 02:43 PM
By EduTech in forum Gaming
Last Post: 25th March 2008, 01:24 PM
By Elky in forum Our Advertisers
Last Post: 4th February 2008, 01:16 PM
By contink in forum Windows
Last Post: 24th April 2007, 12:43 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)