On: Lockdown.exe: Block unknown apps via Windows softw...

[xupybd]

Anyone have recommendations for protecting windows server from ransomware?

[mavhc → xupybd]

Don't let people log into it, install updates.

But it's usually the user data that's the problem, and that's shared to all the other users. So don't let users run unauthorised code by using SRP/Applocker

[ComodoHacker → xupybd]

Have a good backup strategy and execute it well, including mandatory backup testing. Pull-only backups are preferable.

[_wldu → ComodoHacker]

And be sure users can't write to the backup folder, otherwise the backup files will be encrypted too.

[ComodoHacker → _wldu]

That's the 'pull-only' part.