Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1028223" data-attributes="member: 32260">This method can be used at home or for home businesses to apply some basic AppLocker rules on Windows 10 Home. For example, here are rules kinda similar to Smart App Control on Windows 11 :<ol>
<li data-xf-list-type="ol">The unsigned EXE, DLL, and MSI files can be allowed in %ProgramFiles% and %Windows% folders and blocked otherwise (MSI files when executed with standard rights).</li>
<li data-xf-list-type="ol">The signed files can be allowed everywhere.</li>
<li data-xf-list-type="ol">Scripts can be allowed in %ProgramFiles% and %Windows% folders and blocked otherwise (when executed with standard rights).</li>
<li data-xf-list-type="ol">All Scripts and MSI files can be allowed when executed with administrator rights.</li>
</ol>If needed, the restrictions can be turned OFF/ON easily by a simple reg tweak. Whitelisting is not possible (would require new policies made on Windows Pro)</blockquote>

[QUOTE="Andy Ful, post: 1028223, member: 32260"] This method can be used at home or for home businesses to apply some basic AppLocker rules on Windows 10 Home. For example, here are rules kinda similar to Smart App Control on Windows 11 : [LIST=1] [*]The unsigned EXE, DLL, and MSI files can be allowed in %ProgramFiles% and %Windows% folders and blocked otherwise (MSI files when executed with standard rights). [*]The signed files can be allowed everywhere. [*]Scripts can be allowed in %ProgramFiles% and %Windows% folders and blocked otherwise (when executed with standard rights). [*]All Scripts and MSI files can be allowed when executed with administrator rights. [/LIST] If needed, the restrictions can be turned OFF/ON easily by a simple reg tweak. Whitelisting is not possible (would require new policies made on Windows Pro) [/QUOTE]

Verification