- Apr 16, 2017
- 2,094
How to enable AppLocker in win10 pro?
- Thread starter simmerskool
- Start date
Please provide comments and solutions that are helpful to the author of this topic.
- Apr 21, 2016
- 3,394
To enable AppLocker in Windows 10 Pro, follow these steps:
1. Open the Local Group Policy Editor by pressing the Windows key + R and typing "gpedit.msc" in the Run dialog box.
2. In the Local Group Policy Editor, navigate to Computer Configuration > Windows Settings > Security Settings > Application Control Policies > AppLocker.
3. Right-click on the AppLocker node and select "Configure AppLocker."
4. In the AppLocker Properties dialog box, select "Configure rule enforcement" and choose the "Enforce rules" option.
5. Click on the "Configure default rule behavior" option and choose the "Allow" option for all types of rules.
6. Click on the "Configure rule collections" option and create a new rule collection by clicking on the "Create New Rule Collection" button.
7. In the New Rule Collection dialog box, give the rule collection a name and select the type of rules you want to create (executable, script, MSI, or packaged app).
8. Click on the "Create" button to create the new rule collection.
9. In the AppLocker Properties dialog box, click on the "Apply" button to apply the changes.
10. Close the Local Group Policy Editor.
Once you have enabled AppLocker, you can create rules to allow or block specific applications from running on your computer. To create a new rule, right-click on the rule collection you created and select "Create New Rule." Follow the prompts to create the rule and then apply the changes.
1. Open the Local Group Policy Editor by pressing the Windows key + R and typing "gpedit.msc" in the Run dialog box.
2. In the Local Group Policy Editor, navigate to Computer Configuration > Windows Settings > Security Settings > Application Control Policies > AppLocker.
3. Right-click on the AppLocker node and select "Configure AppLocker."
4. In the AppLocker Properties dialog box, select "Configure rule enforcement" and choose the "Enforce rules" option.
5. Click on the "Configure default rule behavior" option and choose the "Allow" option for all types of rules.
6. Click on the "Configure rule collections" option and create a new rule collection by clicking on the "Create New Rule Collection" button.
7. In the New Rule Collection dialog box, give the rule collection a name and select the type of rules you want to create (executable, script, MSI, or packaged app).
8. Click on the "Create" button to create the new rule collection.
9. In the AppLocker Properties dialog box, click on the "Apply" button to apply the changes.
10. Close the Local Group Policy Editor.
Once you have enabled AppLocker, you can create rules to allow or block specific applications from running on your computer. To create a new rule, right-click on the rule collection you created and select "Create New Rule." Follow the prompts to create the rule and then apply the changes.
I though that you also had to enable the application identity service.
Configure the Application Identity service - Windows Security
This article for IT professionals shows how to configure the Application Identity service to start automatically or manually.
learn.microsoft.com
Create Your AppLocker rules - Windows Security
This article for the IT professional describes what you need to know about AppLocker rules and the methods that you can to create rules.
learn.microsoft.com
- Dec 23, 2014
- 8,114
There is no difference compared to other editions, so you can use this:
Use AppLocker to Allow or Block Executable Files in Windows 10
How to Use AppLocker to Allow or Block Executable Files from Running in Windows 10
www.tenforums.com
If you will use the default rules on Admin account, then EXE and DLLs will not be blocked (Scripts and MSI will be blocked).
Do not forget to make a restore point.
Last edited:
Similar threads
