AppLocker Functions
Applies To: Windows 8.1, Windows Server 2008 R2, Windows Server 2012 R2, Windows Server 2012, Windows 8
This topic for the IT professional lists the functions and security levels for the Software Restriction Policies (SRP) and AppLocker features.
Functions
The following list includes the SRP functions beginning with Windows Server 2003 and AppLocker functions beginning with Windows Server 2008 R2 and links to current documentation on MSDN:
SaferGetPolicyInformation Function (https://go.microsoft.com/fwlink/?LinkId=159781)
SaferCreateLevel Function (https://go.microsoft.com/fwlink/?LinkId=159782)
SaferCloseLevel Function (https://go.microsoft.com/fwlink/?LinkId=159783)
SaferIdentifyLevel Function (https://go.microsoft.com/fwlink/?LinkId=159784)
SaferComputeTokenFromLevel Function (https://go.microsoft.com/fwlink/?LinkId=159785)
SaferGetLevelInformation Function (https://go.microsoft.com/fwlink/?LinkId=159787)
SaferRecordEventLogEntry Function (https://go.microsoft.com/fwlink/?LinkId=159789)
SaferiIsExecutableFileType Function (https://go.microsoft.com/fwlink/?LinkId=159790)
Security level ID
AppLocker and SRP use the security level IDs to stipulate the access requirements to files listed in policies. The following table shows those security levels supported in SRP and AppLocker.
Security level ID |
SRP |
AppLocker |
|---|---|---|
SAFER_LEVELID_FULLYTRUSTED |
Supported |
Supported |
SAFER_LEVELID_NORMALUSER |
Supported |
Not supported |
SAFER_LEVELID_CONSTRAINED |
Supported |
Not supported |
SAFER_LEVELID_UNTRUSTED |
Supported |
Not supported |
SAFER_LEVELID_DISALLOWED |
Supported |
Supported |
In addition, URL zone ID is not supported in AppLocker.