Windows10 to Windows11 In place upgrade-Builtin apps not running if applocker policy is enforced

jaiju mathew 0 Reputation points
2025-02-05T07:10:19.9966667+00:00

After running an In-Place upgrade from windows 10 22H2 Enterprise edition  to Windows 11 23H2 Enterprise edition, we are having issues with AppLocker Policy blocking Notepad, Teams, and other Windows 11 apps. We have AppLocker policy configuration via domain GPO.

However, Machines where we do a clean install of Windows 1123H2 or 24H2 is unaffected.

User's image

Can anyone advise what could be th eroot cause

Windows 11
Windows 11
A Microsoft operating system designed for productivity, creativity, and ease of use.
10,718 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Daisy Zhou 29,296 Reputation points Microsoft Vendor
    2025-02-06T07:02:41.6433333+00:00

    Hello

    Thank you for posting in Q&A forum.

    This is a known issue where AppLocker policies might not recognize certain applications correctly due to changes in digital signatures or application paths. Here are some steps you can try:

    1. Review AppLocker Logs:

    Open Event Viewer and navigate to Application and Service Logs > Microsoft > Windows > AppLocker > Packaged app-Execution. Look for any events that indicate applications were blocked due to digital signature issues or other reasons.

    1. Reset AppLocker Cache:

    You can do this by deleting everything in the C:\Windows\System32\AppLocker folder and then syncing the device.

    1. Ensure that you have created default rules for packaged apps in your AppLocker policy. This can help in allowing the necessary applications to run.
    2. Make sure the Application Identity service is running on the affected machines. This service is essential for AppLocker to function correctly.
    3. Compare the AppLocker policies on machines with a clean install and those with an in-place upgrade to identify any discrepancies.

    I hope the information above is helpful.

    If you have any questions or concerns, please feel free to let us know.

    Best Regards,

    Daisy Zhou

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.