1. One or more computer-readable media comprising computer-executable instructions for generating software restriction policy rules, the computer-executable instructions directed to steps comprising: receiving specification of preferred types of software restriction policy rules; receiving specification of a metadata source; generating a software restriction policy rule for each entry in the metadata source in accordance with the specified preferred types of software restriction policy rules; and discarding the generated software restriction policy rule if it is duplicative of a previously generated software restriction policy rule.