How to block executables from APPDATA
While searching for some useful GPOs I encountered very nice thread with clear and thorough explanation about how to restrict/whitelist locations and file types that can be executed in Windows OS using Group Policy Object. Commenter state that using this method he basically got rid of all threads in his environment and analysing his approach [...]