Can applocker use a computer group?

[Theldron]

Hi,

 

Hope you are well.

 

I want to set it up that certain applications can only be run in 2 rooms in a school. Can I add a computer group to a applocker rule or would I need to create a separate applocker GPO?

 

Before I started it was setup that student could run programs for their courses from their desktops (limited in size), but I have now got support to limit this ability to just 2 rooms for programming.

 

Thanks

Edited January 22, 2024 by Theldron

[CHiLL]

Would it not be easier to only deploy the software to the rooms you want it to be used?

[TechMonkey]

I think you can. I haven't done it in a long time. Easiest is probably to make a new GPO with the allow settings and security apply it only to those 2 PCs.

[pete]

OP: Are you trying to limit the running of compiled code written by the students?

[Theldron]

OP: Are you trying to limit the running of compiled code written by the students?

 

Hi,

 

That's right.

 

Yeah before my time, all students could run executables for their programming courses from their desktops, so even students who didn't need this could do it.

 

So when they have create code in Unity or some other program they can put it and run it from their desktops.

[chazzy2501]

Such a huge liability, move them to an online resource or issue non-domain laptops. it'd only take one pupil to copy paste malicious code and bam!

[Theldron]

Such a huge liability, move them to an online resource or issue non-domain laptops. it'd only take one pupil to copy paste malicious code and bam!

 

Hi,

 

Yeah I agree, but I am looking at moving them to virtual environment, but going to take some work.

[chazzy2501]

I had 20 dfe laptops left over, just issued them with a hotspot to "airgap" them.