Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1011842" data-attributes="member: 32260">Good news.&nbsp; <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" />It is possible to get most of AaronLocker to create the XML policy file on Windows 10 Home. One must copy some folders from Windows Pro - they are absent on Windows Home:C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.*C:\Windows\security\ApplicationIdc:\Windows\System32\WindowsPowerShell\v1.0\Modules\ApplockerThe result is the same as for Windows 10 Pro except for Deny rules for LOLBins. But these rules are well known and can be easily added (if necessary).<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" />[URL unfurl=&quot;false&quot;]https://github.com/microsoft/AaronLocker[/URL]EditTo avoid errors related to WDAC, it is necessary to change the default parameter in the script Create-Policies.ps1:$AppLockerOrWDAC = &quot;Both&quot;&nbsp; &nbsp; ------&gt; $AppLockerOrWDAC = &quot;Applocker&quot;Post edited.</blockquote>

[QUOTE="Andy Ful, post: 1011842, member: 32260"] Good news. :) It is possible to get most of AaronLocker to create the XML policy file on Windows 10 Home. One must copy some folders from Windows Pro - they are absent on Windows Home: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.* C:\Windows\security\ApplicationId c:\Windows\System32\WindowsPowerShell\v1.0\Modules\Applocker The result is the same as for Windows 10 Pro except for Deny rules for LOLBins. But these rules are well known and can be easily added (if necessary).(y) [URL unfurl="false"]https://github.com/microsoft/AaronLocker[/URL] Edit To avoid errors related to WDAC, it is necessary to change the default parameter in the script [B][COLOR=rgb(41, 105, 176)]Create-Policies.ps1[/COLOR][/B]: $AppLockerOrWDAC = "Both" ------> $AppLockerOrWDAC = "Applocker" Post edited. [/QUOTE]

Verification