Create policies to enable applications

• Applies to:

  ✅ Windows 11 SE, version 22H2 and later

Deploy an application via Microsoft Intune

Validate the application

Create additional policies (optional)

You can create AppLocker policies to allow apps that are semi-compatible or incompatible with the managed installer to run.

AppLocker policies

Additional AppLocker policies work by configuring other apps to be managed installers. However, since anything downloaded or installed by a managed installer is trusted to run, it creates a significant security risk. For example, if the executable for a third-party browser is set as a managed installer, anything downloaded from that browser will be allowed to run.

To allow apps to run by setting their installers as managed installers, follow the guidance here:

• Edit an AppLocker policy
• Allow apps deployed with a WDAC managed installer

Next steps

Advance to the next article to learn how to deploy the AppLocker policies to Windows 11 SE devices.

Next: deploy policies >