AppLocker functions

Applies to

  • Windows 10
  • Windows 11
  • Windows Server 2016 and above

Note

Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the Windows Defender Application Control feature availability.

This article for the IT professional lists the functions and security levels for the Software Restriction Policies (SRP) and AppLocker features.

Functions

Here are the SRP functions beginning with Windows Server 2003 and AppLocker functions beginning with Windows Server 2008 R2:

Security level ID

AppLocker and SRP use the security level IDs to specify the access requirements to files listed in policies. The following table shows those security levels supported in SRP and AppLocker.

Security level ID SRP AppLocker
SAFER_LEVELID_FULLYTRUSTED Supported Supported
SAFER_LEVELID_NORMALUSER Supported Not supported
SAFER_LEVELID_CONSTRAINED Supported Not supported
SAFER_LEVELID_UNTRUSTED Supported Not supported
SAFER_LEVELID_DISALLOWED Supported Supported

Note

URL zone ID isn't supported in AppLocker.