Configuring AppLocker in Windows Server 2019 | Active Directory Group Policy

Windows Server 2019 Beginners Video Tutorials By MSFTWebcast:

In this video I will walk you through how to create rules in AppLocker to prevent users from accessing certain applications in Windows 10 and Windows Server 2019.

AppLocker is a set of Group Policy settings that used to restrict which applications can run on a Active Directory Network Environment.

Windows Server 2019 Video Tutorials Playlist:

[FranzGuerrero]

The explanation is great, very clear so that user are able to understand how this process works.
I would like to see what other tasks can be done using the Applocaker to manage apps

[santran]

thank you so much. I was able to follow along on my home lab.

[nephilimcrt]

Thanks for this video, it saved me a lot of time.

[yangxiaolong]

Thank you for this tutorial, it helped me a lot

[gerardo]

Hi, I love your works, i'm interested in AppLocker, could you please make a tutorial in which you explain how to use it for let the normal users upgrade certain software (like Java)?

[tilla]

Really nice tutorial and descriptions about the process. Subscribed....

[dexter]

How do we restrict powershell please help, I tried the app locker and even software restrictions it didn't work even after doing gpupdate/force and restart

[Nico-pkpx]

Is there a way to block all folders except for the declared ones (such as Program Files and Windows folders)?

[arvindkmr]

what about multiple applications block

[nikafiltri]

Please make a video on how to block office, word, excel, etc, all office programs. I did everything couldn't figure it out.

[absurdo]

Does this work for portable applications?

[DurgeshMazumdar]

What if we need to apply applocker services for earlier version of windows. Are there any other method or GPO to block those executable files as same.?

[lordking]

hi, thanks for the video
i wanna ask a question
if i checked the box of configure and enforce rule, will that block all programs outside default green roots ?

[defkon]

And to revert this or remove app lock would be just unlinking the GPO, correct?

[jamesklinger]

I followed your instructions carefully, but I keep getting the same problem every time. IE and Edge are blocked just fine but other parts of Windows Sever 2019 are also blocked. Example... I can not open Settings, likely the reason is because IE and Edge are tied so tightly to the OS. How do I fix this?

[lockofmetal]

Don't know if you read comments still on this video.
But if you do come accross this i'd love an answere.

When i follow your steps. On my client VM pc, i run W10 Enterprise.
And this policy ends up blocking everything. As if it blocks everything in Program Files aswell. I can't even open start menus or anything. I tried even opening Cortana and it just goes "This is blocked by your administrator."

[enzoscandelt]

Allowed option in app locker is for what ? withe list ? i mean, if you already can start the app without the policy, why you should allow this rule to lets the app run ? i dont know but that's does not make sense to me. and again, deny rules is very simple, but allow rules?, that is my question

[adobesupport]

I have one doubt, All domain users block this app?

[murodjonsadullaev]

Why can't I use AppLocker for Client Windows, but it's working for Server Member Windows?
Can Smb explain to me why it's not working on Client Windows, or is there another way to run it Client Windows?
Thanks beforehand for your answer :)

[TechNicoe]

First of all, thank you! I have a concern, when I apply this GPO to my Windows Server 2019 a lot of things stop working like the startmenu, power options, etc. Do you have any idea what's wrong?