Requirements to Use AppLocker
Applies To: Windows 7, Windows 8.1, Windows Server 2008 R2, Windows Server 2012 R2, Windows Server 2012, Windows 8
This topic for the IT professional lists software requirements to use AppLocker on the supported Windows operating systems.
General requirements
To use AppLocker, you need:
A computer running a supported operating system to create the rules. The computer can be a domain controller.
For Group Policy deployment, at least one computer with the Group Policy Management Console (GPMC) or Remote Server Administration Tools (RSAT) installed to host the AppLocker rules.
Computers running a supported operating system to enforce the AppLocker rules that you create.
Note
You can use Software Restriction Policies with AppLocker, but with some limitations. For more information, see Use AppLocker and Software Restriction Policies in the Same Domain.
Operating system requirements
The following table show the on which operating systems AppLocker features are supported.
Version |
Can be configured |
Can be enforced |
Available rules |
Notes |
|---|---|---|---|---|
Windows Server 2012 R2 |
Yes |
Yes |
Packaged apps |
|
Windows 8.1 |
Yes |
Yes |
Packaged apps |
Only the Enterprise edition supports AppLocker |
Windows RT 8.1 |
No |
No |
NA |
|
Windows Server 2012 Standard |
Yes |
Yes |
Packaged apps |
|
Windows Server 2012 Datacenter |
Yes |
Yes |
Packaged apps |
|
Windows 8 Pro |
No |
No |
NA |
|
Windows 8 Enterprise |
Yes |
Yes |
Packaged apps |
|
Windows RT |
No |
No |
NA |
|
Windows Server 2008 R2 Standard |
Yes |
Yes |
Executable |
Packaged app rules will not be enforced. |
Windows Server 2008 R2 Enterprise |
Yes |
Yes |
Executable |
Packaged app rules will not be enforced. |
Windows Server 2008 R2 Datacenter |
Yes |
Yes |
Executable |
Packaged app rules will not be enforced. |
Windows Server 2008 R2 for Itanium-Based Systems |
Yes |
Yes |
Executable |
Packaged app rules will not be enforced. |
Windows 7 Ultimate |
Yes |
Yes |
Executable |
Packaged app rules will not be enforced. |
Windows 7 Enterprise |
Yes |
Yes |
Executable |
Packaged app rules will not be enforced. |
Windows 7 Professional |
Yes |
No |
Executable |
No AppLocker rules are enforced. |
AppLocker is not supported on versions of the Windows operating system not listed above. Software Restriction Policies can be used with those versions. However, the SRP Basic User feature is not supported on the above operating systems.
See also
Monitor Application Usage with AppLocker
Optimize AppLocker Performance
Use AppLocker and Software Restriction Policies in the Same Domain