Allowlisting

[njreynolds]

Hi

I am wondering if anyone uses "allowlisting" software.

I've looked at something like Threatlocker, which seems to do everything that I need - but I am guessing its way to expensive.

 

I am looking to be able to BLOCK all exe's,msi's,dll's and then allow them.  With proper apps (Microsoft, Adobe, etc) pre approved.

 

I know I can do certain things with a GPO, APP LOCKER, etc - but I was wondering what good value third party software we been used.

Thanks

[speakercon]

I just use App locker, does everything I need it too. I tried a 3rd party once but it caused loads of problems, blocking certain windows updates and drivers installing ect.

[CHiLL]

AppLocker should do the job, as you can allow app Microsoft apps and then block specific apps on a per-app basis. Couple that with blocking USB access and using File Screen on your file shares to block executable files from the user's home folders.

 

I don't advise working on a block all allow some approach, it can cause so many headaches for things like driver applications, background processes etc.