A major headache for system administrators is controlling what employees install on their devices. It doesn't matter what the firm's policy states, people will try to install whatever applications they want. Technology can help control allowable application installation. Microsoft is trying to help admins by providing a feature in Windows 10 Creators Update that can block Win32 apps from being installed unless they come from the Store. The Creators Update has three options for restricting installation of applications built using the Win32 API. The three settings are:
- Allow apps from anywhere (default setting)
- Allow apps from anywhere but prefer apps from the Store
- Only allow apps from the Store
The setting only controls the installation and not the running of Win32 applications. If the rogue Win32 apps are already installed, they are still allowed to run. Want to really tick off your employees? Configure Windows 10 to the most restrictive setting (Only allow apps from the Store) and watch the fireworks.
E-mail: email@example.com Phone: 703.359.0700
Digital Forensics/Information Security/Information Technology