This new feature is also available in Windows Server 2008 R2 and is a replacement of the ear-Her feature known as 'Software restriction policies.' In AppLocker you can block executable files ie exe and.com files, Windows installer files such as .msi and .msp, and DLL files i.e .dll and .ocx.rnAppLocker supports three types of rules: Path Rules, Hash Rules and Publisher rules. Under Path rules, an application is identified by AppLocker through its path/location on the machine. Under Hash Rules, AppLocker creates a cryptographic hash of an application and uses it to identify the application.
展开▼
机译：Windows Server 2008 R2中也提供了此新功能，并且替代了称为“软件限制策略”的耳挂式功能。在AppLocker中，您可以阻止可执行文件（例如exe和.com文件），Windows安装程序文件（例如.msi和.msp）以及DLL文件（例如.dll和.ocx.rn）。AppLocker支持三种类型的规则：路径规则，哈希规则和发布者规则。在路径规则下，AppLocker通过其在计算机上的路径/位置来标识应用程序。在哈希规则下，AppLocker创建应用程序的加密哈希，并使用它来标识应用程序。
展开▼
