Lockdown.exe: Block unknown apps via Windows software restriction policy

Re:Lockdown.exe: Block unknown apps via Windows software res... by miles on Wednesday June 09, 2021 @02:40AM (#27444951)

The description reads in part,

"Lockdown also goes a step further and restricts not only executables, but DLLs and other code libraries as well."

I wasn't sure if this would include batch files, so I tried testing; sure enough, they were blocked if not run from a whitelisted directory.

[ Parent | on HN ]

Re:Lockdown.exe: Block unknown apps via Windows software res... by londons_explore on Wednesday June 09, 2021 @06:05AM (#27446182)

It presumably doesnt include vbs and python scripts, since as far as windows is concerned those files are no different to bitmap files opening with mspaint?

[ Parent | on HN ]

Re:Lockdown.exe: Block unknown apps via Windows software res... by dncornholio on Wednesday June 09, 2021 @06:19AM (#27446266)

If you whitelist mspaint, than it doesn't matter where the file is you are opening. So I guess you have to whitelist the python and VBS executables first

[ Parent | on HN ]

Re:Lockdown.exe: Block unknown apps via Windows software res... by londons_explore on Wednesday June 09, 2021 @10:40AM (#27448420)

But thats my point... These default rules that whitelist all of c:windows and c:Programs will end up whitelisting those...

[ Parent | on HN ]

Re:Lockdown.exe: Block unknown apps via Windows software res... by FoolishTech on Thursday June 10, 2021 @09:11AM (#27460284)

VBS and PY extensions are included in what is blocked...

[ Parent | on HN ]

Re:Lockdown.exe: Block unknown apps via Windows software res... by miles on Friday June 11, 2021 @02:05PM (#27476606)

Thanks for adding them, Nick. I see from the 1.1.1 release notes that you also added JS, JSE, and PS1 on top of the Windows default list of 30 executable file types.

[ Parent | on HN ]

Re:Lockdown.exe: Block unknown apps via Windows software res... by mavhc on Wednesday June 09, 2021 @07:06AM (#27446539)

You choose what extensions are filtered in SRP settings

[ Parent | on HN ]