My use case is pretty simple i.e. - "Blacklisting Apps(including Store Apps) and URLs on a device".
You can think of it like a MDM Scenario where I want to do various stuff on the device enrolled e.g. Blacklisting, etc...
I could figure out that "AppLocker" is something that I wanted.
Also I found that in Windows 10, AppLocker provides CSP which can be used in my case. But for Windows 7, 8, 8.1, though AppLocker is present but there is no CSP stuff (as far as I could figure out, I may be wrong :) )
How can I achieve the above App and URL Blacklisting on Windows 7, 8 and 8.1 atleast on my local PC and then replicate to the MDM Solution. Thanks!!
Do all the configurations you need on your local computer. Microsoft documentation is pretty complete on that topic: AppLocker.
On the configuration device, launch the
Local Security Policy
editor. Navigate toApplication Control Policies > AppLocker
and selectConfigure Rule Enforcement
.Once it's done, Right click
AppLocker
and selectExport Policy
and save the XML configuration file. Now, you just have to deploy this file to your fleet. If you have a MDM solution, maybe it supports this feature. AirWatch does, I don't know for others but it's very likely. You can also look into Windows Imaging and Configuration Designer. This Microsoft tool produce packages which configure Windows. I'm pretty confident that you can achieve the same goal that AirWatch Products.