1. One or more computer-readable storage media comprising computer-executable instructions for generating software restriction policy rules, the computer-executable instructions directed to steps comprising: receiving a user's specification of preferred types of software restriction policy rules that are preferred by the user; receiving the user's specification of a metadata source; determining a software restriction policy rule for each entry in the metadata source in accordance with the specified preferred types of software restriction policy rules; determining if the software restriction policy rule is duplicative of a previously generated software restriction policy rule; determining if the software restriction policy rule is an exception to the previously generated software restriction policy rule; generating the software restriction policy rule determining reveals that the software restriction policy rule is neither duplicative of the previously generated software restriction policy rule nor is the exception to the previously generated software restriction policy rule; and generating the exception to the previously generated software restriction policy rule instead of generating software restriction policy rule if the determining reveals that the software restriction policy rule is not duplicative of the previously generated software restriction policy rule but is the exception to the previously generated software restriction policy rule.