If your organization wants to prevent users from installing Windows XP Mode on their Windows 7 Enterprise computers, there are several ways you can do this:
Create the necessary Windows AppLocker rules for doing this
- Ensure users have standard (non-admin) accounts, which will prevent them from installing new software on their computers
Disable hardware virtualization in the BIOS of user’s computers and then password-protect the bios so the user can’t re-enable this feature.
Use the Application Compatibility Toolkit (ACT) to create a custom APPHELP HARDBLOCK using the Compatibility Administrator.
Mitch Tulloch is a seven-time recipient of the Microsoft Most Valuable Professional (MVP) award and widely recognized expert on Windows administration, deployment and virtualization. For more tips by Mitch you can follow him on Twitter or friend him on Facebook.