Using SRP or Applocker for white listing application for terminal server lock down ?

[albertwt]

Hi All,

 

I'd like to know what is the best way to securely lock down binaries in Windows Server 2008 R2 ?

 

So that only certain application that is white listed can run, the other should not run (white listing)

 

Should I configure it using Applocker through Local GPO ? or using SRP ?

 

Any kind of help would be greatly appreciated.

 

Thanks,

 

AWT