Windows AppLocker basics

In this video you'll see the basic setup and operation of Windows AppLocker which is used to whitelist applications and locations on a Windows machine to determine what programs can be executed. Because this example is on a stand alone machine you'll need to use Windows 10 Enterprise, however if you apply the AppLocker policies using Intune, it will also work with Windows 10 Professional.

Windows AppLocker is a great way to configure a Windows machine to reduce the threat from ransomware.

[Schnitzerci]

Just wanted to say thanks for the upload. Had to come back here to refresh and realise that AppLocker does not work on Win10 Pro whilst testing, only works through Endpoint Manager. Your efforts are much appreciated and it was nice and concise. Thanks. 👍

[Live-TS]

start menu not work after sign out and sign in for user

[blindside]

Fantastic video. Thank you for making this information public and providing a resource for anyone with interest in this feature of windows.
Also, I totally realize it has been stated before, but just adding another data point.
Seems windows 10 pro 22H2 and 11 pro 22H2.

[Lofote]

22H2 for both Windows 10 as well as Windows 11 adds AppLocker to all editions without MDM, Intune, PS scripts or any other tricks :)

[Skewel]

Can I black list certain apps from automatically downloading and installing through Microsoft Store with AppLocker?

[PrasadMahadgut-gkzk]

Why user1 is not allowed to execute files in Downloads folder, as it should be allowed, because it is part of Windows Directory, right??

[absurdo]

Does this work for portable applications?

[liviustancu]

I have one question, what happens if other files (including malicious executables) are copied to windows or "program files" directory, are they still allowed to run?

[defkon]

And to remove this would be to simply remove the GPU from that OU, correct?

[alexpoimen]

not apply the rule on Win 11 Pro.... (it's a stand alone pc).. may i have your help?

[jr]

I noticed that the windows service - 'Identity Application' is set by default as 'Manual' start type, I´m able to 'start' it but I cannot set it as 'automatic' - should we create (before) some policy to change his startup to automatic or even use some policy to force it to start in order to the rules to be applied?

[jovelwalter]

Seems like app locker is also now available in Pro versions of Windows 11 and Windows 10
can someone confirm? the video say enterprise version are need.

[keiotani]

is there a way to make it work in home edition?

[VibingG]

Sir how can i apply this app locker on my downloads and documents files i got an assignment of this so please help me how can i do that...

[JejwIwu]

It blocks all my apps and I can't get to it anymore