


Of course, for most users, the use of Group Policy to configure the "software management strategy" is too complicated and professional.

From this point of view, the "software restriction strategy" in Group Policy is the best system management tool. On the other hand, because the Group Policy is native to the system, it may be seamlessly integrated with the operating system at the bottom layer, so there will be no compatibility problems or problems such as high CPU usage and excessive memory consumption. In fact, in Windows, if the "software restriction strategy" in the group policy can be used well, combined with NTFS permissions and registry permissions, you can still say goodbye to anti-virus software calmly. In terms of system security, someone once said that if you use HIPS (Host-based Intrusion Prevention System) well, you can say goodbye to antivirus software.
