How to use and setup AppLocker?

mf 61

Hi all,

we have a little network (all win10 or win11, home or pro edition) without a domain controller (all the PC are standalone in a workgroup).

I would need to setup AppLocker to help me control which apps and files users can run.

How can I install and setup this AppLocker?

thanks!

1 answer

Matthew Bechtol 461 Reputation points

2023-01-16T23:46:38.53+00:00

Here are some good sources on AppLocker. I hope they help

[https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/applocker/applocker-policies-deployment-guide

[https://learn.microsoft.com/en-us/windows/configuration/lock-down-windows-10-applocker
Please sign in to rate this answer.
Ale Madama 276 Reputation points

2023-02-21T13:10:27.0933333+00:00

Hi Matthew, thank you for your suggestions!

I have to setup some PCs and my users are under the group USERS (only this group).

At this very beginning, they can run everything on their PC, everything is now installed has to be allowed.

But from now on, they have to ask Administrator for every new installation.

Then I thought:

ALLOW all the .EXE under "c:\programs files" only for the group USERS (what to choose under "rules preferencies"?)

ALLOW all the .EXE under "c:\programs files (x86)" only for the group USERS (what to choose under "rules preferencies"?)

ALLOW all the packaged APPS only for the group USERS

CREATE DEFAULT RULES (and leave as they are) to allow Administrators and all the users out of Users group, to have no restrictions

Is it correct? or I am missing something?

This way they should be able to run every app or program is now installed on their PC, but they can't run anything newly installed, is it right?

Administrator should be out of these rules, right?

many thanks

mf
Sign in to comment