Title of Lesson

Download 37.4 Kb.

Date	03.02.2021
Size	37.4 Kb.
	#55748

CNIT-361 Lab 18 Worksheet
CNIT-361 Lab 18 Worksheet

This lab contains the following exercises and activities

MOAC 70-410 - Installing and Configuring Windows Server 2012 R2 Lab Manual

_Lab18

Configuring Application Restriction Policies

This lab contains the following exercises and activities:

Exercise 18.1

Exercise 18.2

Lab Challenge

Configuring Software Restriction Policies

Using AppLocker

Creating Additional Rules

Exercise 18.1	Creating Software Restriction Policies
Overview	In this exercise, you create a rule that prevents users from running a specific program.
Mindset	How can you stop network users from wasting time with games and other non-productive programs?
Completion time	20 minutes

Question 1

What problem would occur if you changed the default software restriction to Disallowed and configured a hash rule setting the regedit.exe file to Unrestricted?

19. Press Alt+Prt Scr to take a screen shot showing the message box. Press Ctrl+V to paste the image on the page provided in the Lab 18 worksheet file.

[copy screen shot over this text]

Exercise 18.2	Using AppLocker
Overview	In this exercise, you create rules governing program access using AppLocker.
Mindset	How does the process of creating AppLocker rules differ from that of creating software restriction policies?
Completion time	20 minutes

23. Press Alt+Prt Scr to take a screen shot showing the rules in the Group Policy Management console. Press Ctrl+V to paste the image on the page provided in the Lab 18 worksheet file.
[copy screen shot over this text]

Question 2

Why is it necessary to start the Application Identity service before the AppLocker rules take effect?

Lab Challenge	Creating Additional Rules
Overview	To complete this challenge, you must create a new GPO containing additional AppLocker rules.
Completion time	20 minutes

On the SERVERB computer, create a new GPO called AppLocker 2 and create an executable rule that allows members of the Administrators group to run all digitally signed files published by Microsoft.

Press Alt+Prt Scr to take a screen shot of the Group Policy Management Editor console showing the rule you created and press Ctrl+V to paste the image on the page provided in the Lab 18 worksheet file.

[copy screen shot over this text]
End of lab. You can log off or start a different lab. If you want to restart this lab, you’ll need to click the End Lab button in order for the lab to be reset.

Download 37.4 Kb.

Share with your friends: