應(yīng)用程序白名單實(shí)現(xiàn)

Windows 10’s Creators Update has a switch you can flip to only allow apps from the Windows Store. This feature can also be used to whitelist your existing desktop apps, only allowing your currently installed applications to run and blocking new applications until you allow them. It’s similar to Gatekeeper on macOS.

Windows 10的Creators Update具有一個(gè)開關(guān)，您可以將其切換為僅允許Windows應(yīng)用商店中的應(yīng)用程序。 此功能還可用于將您現(xiàn)有的桌面應(yīng)用列入白名單，僅允許您當(dāng)前安裝的應(yīng)用運(yùn)行并阻止新應(yīng)用，直到您允許它們?yōu)橹埂?它類似于macOS上的Gatekeeper 。

如何僅從商店運(yùn)行應(yīng)用程序 (How to Run Only Apps From the Store)

You’ll find this option under Settings > Apps > Apps & Features after upgrading to the Creators Update. Under “Installing Apps”, you can select either “Allow apps from anywhere”, “Warn me before installing apps from outside the Store”, or “Allow apps from the Store only”.?The default option allows you to run applications from anywhere, which is the way Windows has traditionally worked.

升級(jí)到創(chuàng)作者更新后，您可以在設(shè)置>應(yīng)用>應(yīng)用和功能下找到此選項(xiàng)。 在“安裝應(yīng)用程序”下，您可以選擇“允許從任何地方使用應(yīng)用程序”，“在從商店外部安裝應(yīng)用程序之前警告我”或“僅允許從商店使用應(yīng)用程序”。 默認(rèn)選項(xiàng)允許您從任何地方運(yùn)行應(yīng)用程序，這是Windows傳統(tǒng)上的工作方式。

At the moment, choosing?to run only applications from the Windows Store is a bit limiting. Many applications aren’t available in the Windows Store, including the desktop versions of Microsoft’s own Office applications. However, as more desktop applications are packaged for the Windows Store via Project Centennial, blocking desktop applications from elsewhere may become a useful security feature to help prevent malware from being installed on your system.

目前，選擇僅運(yùn)行Windows應(yīng)用商店中的應(yīng)用程序是有一定限制的。 Windows應(yīng)用商店中沒有許多應(yīng)用程序，包括Microsoft自己的Office應(yīng)用程序的桌面版本。 但是，隨著越來越多的桌面應(yīng)用程序通過Project Centennial為Windows Store打包，從其他地方阻止桌面應(yīng)用程序可能會(huì)成為有用的安全功能，以幫助防止惡意軟件安裝在系統(tǒng)上。

如何將特定的桌面應(yīng)用列入白名單 (How to Whitelist Specific Desktop Apps)

If you select “Allow apps from the Store only”, you’ll still be able to run all the desktop apps you’ve already installed. However, if you download an .exe file or other app from the Internet and try to run or install it, you’ll see a message saying the installation was blocked.

如果您選擇“僅允許來自商店的應(yīng)用程序”，您仍然可以運(yùn)行已安裝的所有桌面應(yīng)用程序。 但是，如果您從Internet下載.exe文件或其他應(yīng)用程序并嘗試運(yùn)行或安裝它，則會(huì)看到一條消息，說明安裝被阻止。

Want to install the app anyway? Click the “Open Settings” link or head back to Settings > Apps > Apps & Features and set the option to “Allow apps from anywhere”. Install the app normally. After you do, you can set the option back to “Allow apps from the Store only”. The app you just installed will be given permission to run, while future apps you install won’t have it.

是否仍要安裝該應(yīng)用程序？ 點(diǎn)擊“打開設(shè)置”鏈接或返回設(shè)置>應(yīng)用>應(yīng)用和功能，然后將選項(xiàng)設(shè)置為“允許任何地方的應(yīng)用”。 正常安裝應(yīng)用程序。 完成后，您可以將選項(xiàng)設(shè)置回“僅允許來自商店的應(yīng)用”。 您剛剛安裝的應(yīng)用將被授予運(yùn)行權(quán)限，而將來安裝的應(yīng)用將沒有運(yùn)行權(quán)限。

While the wording here refers to “installing applications”, this also works for self-contained .exe files like portable apps. When you download a new .exe file, Windows will prevent you from opening it. If you tell Windows to run all software, you can then launch the .exe file. Tell Windows to block apps from outside the Store afterwards?and you’ll still be able to run that .exe file and any other apps you’ve already run.

盡管此處的措辭是指“安裝應(yīng)用程序”，但它也適用于自包含的.exe文件，如便攜式應(yīng)用程序 。 當(dāng)您下載新的.exe文件時(shí)，Windows會(huì)阻止您打開它。 如果告訴Windows運(yùn)行所有軟件，則可以啟動(dòng).exe文件。 告訴Windows之后再從商店外部阻止應(yīng)用程序，您仍然可以運(yùn)行該.exe文件以及已經(jīng)運(yùn)行的任何其他應(yīng)用程序。

You can also choose the “Warn me before installing apps from outside the Store” option to save time. When you try to run or install a new app file, it will be blocked but you can click “Install anyway” to give the app permission to run. You’ll only have to give it permission once, and it will be allowed to run without any additional prompts in the future.

您還可以選擇“在從商店外部安裝應(yīng)用程序之前警告我”選項(xiàng)，以節(jié)省時(shí)間。 當(dāng)您嘗試運(yùn)行或安裝新的應(yīng)用程序文件時(shí)，該文件將被阻止，但是您可以單擊“仍然安裝”以授予該應(yīng)用程序運(yùn)行權(quán)限。 您只需要授予一次權(quán)限，以后就可以運(yùn)行它而無需任何其他提示。

This feature is pretty interesting because it gives Windows desktop users an easy way to whitelist desktop apps, something that’s normally restricted to Enterprise and Education editions of Windows with AppLocker. Once you get the apps you use installed, you can flip this switch to block new apps from running without your express permission.

此功能非常有趣，因?yàn)樗鼮閃indows桌面用戶提供了一種將桌面應(yīng)用程序列入白名單的簡(jiǎn)便方法，而通常僅限于帶有AppLocker 的Windows企業(yè)版和教育版 。 一旦安裝了要使用的應(yīng)用程序，就可以翻轉(zhuǎn)此開關(guān)，以阻止新應(yīng)用程序在未經(jīng)您明確許可的情況下運(yùn)行。

This sort of whitelisting was previously possible on any edition of Windows 7 and 8 via Family Safety, but that feature was removed from Windows 10.?This new “Installing apps” option allows you to set up a basic form of whitelisting once again.

以前可以通過家庭安全在任何版本的Windows 7和8上進(jìn)行這種白名單，但是從Windows 10中刪除了該功能。新的“安裝應(yīng)用程序”選項(xiàng)使您可以再次設(shè)置白名單的基本形式。

翻譯自: https://www.howtogeek.com/302352/how-to-allow-only-apps-from-the-store-on-windows-10-and-whitelist-desktop-apps/

應(yīng)用程序白名單實(shí)現(xiàn)

總結(jié)

以上是生活随笔為你收集整理的应用程序白名单实现_如何在Windows 10上仅允许商店中的应用程序（和白名单桌面应用程序）...的全部?jī)?nèi)容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網(wǎng)站內(nèi)容還不錯(cuò)，歡迎將生活随笔推薦給好友。