應用程序白名單實現

Windows 10’s Creators Update has a switch you can flip to only allow apps from the Windows Store. This feature can also be used to whitelist your existing desktop apps, only allowing your currently installed applications to run and blocking new applications until you allow them. It’s similar to Gatekeeper on macOS.

Windows 10的Creators Update具有一個開關，您可以將其切換為僅允許Windows應用商店中的應用程序。 此功能還可用于將您現有的桌面應用列入白名單，僅允許您當前安裝的應用運行并阻止新應用，直到您允許它們為止。 它類似于macOS上的Gatekeeper 。

如何僅從商店運行應用程序 (How to Run Only Apps From the Store)

You’ll find this option under Settings > Apps > Apps & Features after upgrading to the Creators Update. Under “Installing Apps”, you can select either “Allow apps from anywhere”, “Warn me before installing apps from outside the Store”, or “Allow apps from the Store only”.?The default option allows you to run applications from anywhere, which is the way Windows has traditionally worked.

升級到創作者更新后，您可以在設置>應用>應用和功能下找到此選項。 在“安裝應用程序”下，您可以選擇“允許從任何地方使用應用程序”，“在從商店外部安裝應用程序之前警告我”或“僅允許從商店使用應用程序”。 默認選項允許您從任何地方運行應用程序，這是Windows傳統上的工作方式。

At the moment, choosing?to run only applications from the Windows Store is a bit limiting. Many applications aren’t available in the Windows Store, including the desktop versions of Microsoft’s own Office applications. However, as more desktop applications are packaged for the Windows Store via Project Centennial, blocking desktop applications from elsewhere may become a useful security feature to help prevent malware from being installed on your system.

目前，選擇僅運行Windows應用商店中的應用程序是有一定限制的。 Windows應用商店中沒有許多應用程序，包括Microsoft自己的Office應用程序的桌面版本。 但是，隨著越來越多的桌面應用程序通過Project Centennial為Windows Store打包，從其他地方阻止桌面應用程序可能會成為有用的安全功能，以幫助防止惡意軟件安裝在系統上。

如何將特定的桌面應用列入白名單 (How to Whitelist Specific Desktop Apps)

If you select “Allow apps from the Store only”, you’ll still be able to run all the desktop apps you’ve already installed. However, if you download an .exe file or other app from the Internet and try to run or install it, you’ll see a message saying the installation was blocked.

如果您選擇“僅允許來自商店的應用程序”，您仍然可以運行已安裝的所有桌面應用程序。 但是，如果您從Internet下載.exe文件或其他應用程序并嘗試運行或安裝它，則會看到一條消息，說明安裝被阻止。

Want to install the app anyway? Click the “Open Settings” link or head back to Settings > Apps > Apps & Features and set the option to “Allow apps from anywhere”. Install the app normally. After you do, you can set the option back to “Allow apps from the Store only”. The app you just installed will be given permission to run, while future apps you install won’t have it.

是否仍要安裝該應用程序？ 點擊“打開設置”鏈接或返回設置>應用>應用和功能，然后將選項設置為“允許任何地方的應用”。 正常安裝應用程序。 完成后，您可以將選項設置回“僅允許來自商店的應用”。 您剛剛安裝的應用將被授予運行權限，而將來安裝的應用將沒有運行權限。

While the wording here refers to “installing applications”, this also works for self-contained .exe files like portable apps. When you download a new .exe file, Windows will prevent you from opening it. If you tell Windows to run all software, you can then launch the .exe file. Tell Windows to block apps from outside the Store afterwards?and you’ll still be able to run that .exe file and any other apps you’ve already run.

盡管此處的措辭是指“安裝應用程序”，但它也適用于自包含的.exe文件，如便攜式應用程序 。 當您下載新的.exe文件時，Windows會阻止您打開它。 如果告訴Windows運行所有軟件，則可以啟動.exe文件。 告訴Windows之后再從商店外部阻止應用程序，您仍然可以運行該.exe文件以及已經運行的任何其他應用程序。

You can also choose the “Warn me before installing apps from outside the Store” option to save time. When you try to run or install a new app file, it will be blocked but you can click “Install anyway” to give the app permission to run. You’ll only have to give it permission once, and it will be allowed to run without any additional prompts in the future.

您還可以選擇“在從商店外部安裝應用程序之前警告我”選項，以節省時間。 當您嘗試運行或安裝新的應用程序文件時，該文件將被阻止，但是您可以單擊“仍然安裝”以授予該應用程序運行權限。 您只需要授予一次權限，以后就可以運行它而無需任何其他提示。

This feature is pretty interesting because it gives Windows desktop users an easy way to whitelist desktop apps, something that’s normally restricted to Enterprise and Education editions of Windows with AppLocker. Once you get the apps you use installed, you can flip this switch to block new apps from running without your express permission.

此功能非常有趣，因為它為Windows桌面用戶提供了一種將桌面應用程序列入白名單的簡便方法，而通常僅限于帶有AppLocker 的Windows企業版和教育版 。 一旦安裝了要使用的應用程序，就可以翻轉此開關，以阻止新應用程序在未經您明確許可的情況下運行。

This sort of whitelisting was previously possible on any edition of Windows 7 and 8 via Family Safety, but that feature was removed from Windows 10.?This new “Installing apps” option allows you to set up a basic form of whitelisting once again.

以前可以通過家庭安全在任何版本的Windows 7和8上進行這種白名單，但是從Windows 10中刪除了該功能。新的“安裝應用程序”選項使您可以再次設置白名單的基本形式。

翻譯自: https://www.howtogeek.com/302352/how-to-allow-only-apps-from-the-store-on-windows-10-and-whitelist-desktop-apps/

應用程序白名單實現

總結

以上是生活随笔為你收集整理的应用程序白名单实现_如何在Windows 10上仅允许商店中的应用程序（和白名单桌面应用程序）...的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。