This guide provides steps based on your design and planning investigation for deploying application control policies by using AppLocker. It is intended for security architects, security administrators, and system administrators. Through a sequential and iterative deployment process, you can create application control policies, test and adjust the policies, and implement a method for maintaining those policies as the needs in your organization change.

This guide covers the use of Software Restriction Policies (SRP) in conjunction with AppLocker policies to control application usage. For a comparison of SRP and AppLocker, see Using Software Restriction Policies with AppLocker Policies in this guide. To understand if AppLocker is the correct application control solution for you, see Understanding AppLocker Policy Design Decisions.

The following are prerequisites or recommendations to deploying policies:

• Understand the capabilities of AppLocker:
  
  
  • AppLocker Technical Overview
    
    
  • AppLocker Step-by-Step Guide
    
    
• Document your application control policy deployment plan by addressing these tasks:
  
  
  • Understanding the AppLocker Policy Deployment Process
    
    
  • Understanding AppLocker Policy Design Decisions
    
    
  • Determining Your Application Control Objectives
    
    
  • Creating the List of Applications Deployed to Each Business Group
    
    
  • Selecting the Types of Rules to Create
    
    
  • Determining Group Policy Structure and Rule Enforcement
    
    
  • Planning for AppLocker Policy Management
    
    
  • Creating Your AppLocker Planning Document
    
    

This guide provides steps based on your design and planning investigation for deploying application control policies created and maintained by AppLocker for computers running Windows Server 2008 R2 and Windows 7. It contains the following topics:

• Understanding the AppLocker Policy Deployment Process
  
  
• Requirements for Deploying AppLocker Policies
  
  
• Using Software Restriction Policies with AppLocker Policies
  
  
• Creating Your AppLocker Policies
  
  
• Deploying the AppLocker Policy into Production
  
  
• Maintaining AppLocker Policies
  
  

• Using Software Restriction Policies to Protect Against Unauthorized Software (http://go.microsoft.com/fwlink/?LinkID=155634)
  
  This TechNet article is about SRP in Windows XP and Windows Server 2003 and is also applicable to Windows Vista and Windows Server 2008. It provides an in-depth look at how software restriction policies can be used to fight viruses, regulate which ActiveX controls can be downloaded, run only digitally signed scripts, and enforce that only approved software is installed on system computers.
  
  
• Software Restriction Policies
  
  This collection of Windows Server 2003 product help topics describes the concepts to understand and the steps to implement and maintain SRP.
  
  
• AppLocker
  
  This topic lists AppLocker documentation resources for the IT professional.