Application Whitelisting Using Software Restriction Policies (NSA guide)

hxxp://www.nsa.gov/ia/mitigation_guidance/security_configuration_guides/operating_systems.shtml

 

Related resources:
Use a Software Restriction Policy (or Parental Controls) to stop exploit payloads and Trojan Horse programs from running
Auditing permissions of an admin account protected with UAC
MrBrian's AppLocker ruleset (note: I've added c:\windows\PCHEALTH\ERRORREP\* to the folder list since that post; I've also added a few more folders to the folder list as a result of auditing my UAC-protected admin account)

 

Direct pdf hxxp://www.nsa.gov/ia/_files/os/win2k/application_whitelisting_using_srp.pdf