If you are looking for software whitelisting then AppLocker (new name in Windows 7 and 2008 R2 from Software Restriction Policy) is the best bet. Whitelisting will allow the admin to set what applications can run or install based on file name (not recommended) or hash. Enable this in a lab environment first as it will most likely break everything at first until you get all the rules in. You can also use blacklisting if you have a good reliable resource for bad hashes but we all know how easy it is to bypass that.
Best Regards, Jorge Orchilles
_______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
