AppLocker: Set up program lock under Windows 7

Would you like to protect your home or business PC from unauthorized program installations or program launches? This is no problem with Windows 7's program lock called "Applocker". This allows you to block either specific programs or even entire program groups - so your PC stays clean. [Sandro Villinger]

If the blocked program is started or an attempt is made to install it in future, only a message about the block by the administrator appears.
Note: Only works with Windows 7 Enterprise and Ultimate

This is how it works step by step

1. Hold down the WINDOWS key and tap the R key. Enter the command "gpedit.msc" in the "Run" field and click "OK".
2. Then expand the entries "Computer configuration/Windows settings/Security settings/Application control policies" and finally "Applocker" one after the other.
3. To block a program, first click on the "Executable rules" entry. In the right-hand pane, click on a free area and select "Create new rule".
   In the Asisstent that appears, confirm immediately with "Next" and select the "Deny" entry. If you only want to block applications for a specific user, select the user or user group by clicking "Select". Then confirm by clicking on "Next".
   You now have the option of blocking all applications of a manufacturer ("Publisher"), a complete folder path ("Path") or a single .exe file ("File hash"):

   

   In the example, we decide to block only one specific program and select "File hash". Simply select the program via "Browse": In our example, we want to block the start of "Cryptload". To do this, open the folder "C:Program FilesCryptLoad 1.1.8" and double-click on "cryptload.exe".

   

4. Click on "Next" and "Create". In the next window, confirm the creation of a standard rule by clicking on "Yes". Done! Now restart the PC.

Important note: You can also block complete program installations using the method described above. To do this, simply create a new "Windows Installer rule". The steps shown above hardly differ - here, for example, you can block all programs of a manufacturer or only certain installation files.