Disabling "App locker application control" setting

Question

Hi

We have enabled following setting in Endpoint Manager:

Endpoint Manager -> Endpoint Security -> Attack Surface reduction -> Application control (policy) -> "App locker application control" = Enforce Components, Store Apps, and Smartlocker

If we change this to "Not configured", should it change the setting in devices? Because we are not seeing any change in the device.

How can we get this setting change to actually change the setting in the devices?

Answer 1

Hi,

Thank you for posting in Microsoft Q&A forum.

AppLocker CSP behavior will prompt end user to reboot their machine when an AppLocker policy is deployed.

We can check below policy result to have a try:

Computer Configuration\Policies\Windows Settings\Security Settings\Application Control Policies\AppLocker

Thanks for your time. Have a nice day!

Best regards,

Simon

---

If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Yes, it should and will result in a reboot.

Answer 3

How can I check that it is disabled?