Windows 10
A Microsoft operating system that runs on personal computers and tablets.
10,678 questions
We ran an AutoPilot Reset on the device and after it came back up it worked properly
AppLocker Intune Policy does not work properly
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(83.2, 51%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EF%3C/text%3E%3C/svg%3E)
fishizza
0
Reputation points
I have created default AppLocker policies and then exported the XML file to use this to create a corresponding Intune policy. Specifically for the EXE policy this does not work. We are running VMware Horizon agent on the base system and with the locally applied AppLocker policy it is able to run. When I apply this to an Intune policy it prevents the app from running with the 8004 AppLocker error logged. Any help would be appreciated.
{count} votes
-
fishizza 0 Reputation points
2023-03-01T17:59:09.33+00:00 -
fishizza 0 Reputation points
2023-03-01T17:59:23.5366667+00:00 <RuleCollection Type="Exe" EnforcementMode="Enabled"> <FilePathRule Id="921cc481-6e17-4653-8f75-050b80acca20" Name="(Default Rule) All files located in the Program Files folder" Description="Allows members of the Everyone group to run applications that are located in the Program Files folder." UserOrGroupSid="S-1-1-0" Action="Allow"> <Conditions> <FilePathCondition Path="%PROGRAMFILES%\*" /> </Conditions> </FilePathRule> <FilePathRule Id="a61c8b2c-a319-4cd0-9690-d2177cad7b51" Name="(Default Rule) All files located in the Windows folder" Description="Allows members of the Everyone group to run applications that are located in the Windows folder." UserOrGroupSid="S-1-1-0" Action="Allow"> <Conditions> <FilePathCondition Path="%WINDIR%\*" /> </Conditions> </FilePathRule> <FilePathRule Id="fd686d83-a829-4351-8ff4-27c7de5755d2" Name="(Default Rule) All files" Description="Allows members of the local Administrators group to run all applications." UserOrGroupSid="S-1-5-32-544" Action="Allow"> <Conditions> <FilePathCondition Path="*" /> </Conditions> </FilePathRule> </RuleCollection> -
Lu Dai-MSFT 28,356 Reputation points2023-03-02T02:31:16.55+00:00 @fishizza Thanks for posting in our Q&A.
For this issue, it is more complex, and I know little about it. With Q&A limitation, it is suggested to create an online support ticket to get more accurate help. Here is the support link:
https://learn.microsoft.com/en-us/mem/get-support
Thanks for your understanding and hope everything goes well with you.
Sign in to comment