AppLocker, which is built in to Windows 7 Enterprise and Windows 8later, prevents unknown programs from running unless installed or otherwise pre-cleared by an admin first. This provides tremendous protection against malware. Even is increasingly necessary because even antivirus companies are publicly saying that antivirus provides little protection against current malware. Rather than attempt to enumerate what's bad, application whitelisting technologies like AppLocker enumerate what's good, and deny everything else. This turns out to be a lot easier less difficult than it sounds.
Current Status
AppLocker policies are A "reporting-only" AppLocker policy is in place for most campus computers. The policy is maintained by Information Security.
Selected Business Office and ITS computers have been placed in an organizational unit (OU) that blocks unapproved programs.
References For Understanding AppLocker
...