Basics of deploying Windows AppLocker using Intune

This video provides a basic run through of what you need to do when deploying AppLocker using Microsoft Intune. Applying AppLocker policies via this method will work for both Windows Enterprise and Professional. Windows AppLocker is a method of 'whitelisting' applications to prevent ransomware infections and is built into Windows 10.

[__whitehawk__]

Awesome tutorial man. Worked like a charm for my AD!

[AN-icwp]

Hey Mate. Fantastic video and some great clear explanations. Can I ask what resource you used to locate the correct OMA-URA?

[kanjoracer]

Great video, exactly what i was looking for. What is the value I have to insert for msi?

[idatoo]

great video! can I whitelist a path? what i mean to say is, I would like a particular path that is exempt from applocker policies.

[krishnakps]

how to block installation of all exe, msi applications from running

[piersonmoran]

Hey Robert, how do you deploy the Managed Installer Applocker policy via intune. Is there a Custom URI for this? Like As you separate each policy <RuleCollection Type="">. How do you deploy through Intune, the <RuleCollection Type="ManagedInstaller">?

The Documents on MS website only mention how deploy through GPO or running a Script.

cheers mate.

[gokulrdev]

Excellent video.. I tried to create one. But in deployment status it is showing remediated.. Do you know why?

[sanojvettath]

Hello Robert, The policy worked for me unfortunately its blocking ms teams and wont allow the admin to execute MSI packages

[roshanjangid]

Can we define a list of allowed software there and block all others?

[inlinesix]

Thanks but how would you automate the reconfiguration of the Windows Service (with Intune) so you can actually deploy this out?

[khanhphanduy]

Thanks for video. Please tell me more. What is condition need to configuration an Applocker? Ex: AD on-prime, PC joined domain? or Just Intune. Thank you