Question Regarding Group Policy 2008 R2


  • Hello,

    I am trying to work on a GPO to harden Windows 2008 R2 and 2012 R2 Systems, and need help with following:

    1. I want to restrict software installation on Windows Servers for everyone except a particular security group. I tried looking into Software Restriction Policy and AppLocker, but they both are complicated. I just want to restrict installation of software. Due to complex nature of our environment I can't restrict anyone from executing files like .exe, it would be very difficult to whitelist applications since its been around from 4-5 years.

    2. If something isn't working - how can I trace back the issue to a particular setting within the GPO that I have implemented?

    Please advice.


    Wednesday, May 6, 2015 1:18 AM


All replies