Administering AppLocker

Applies To: Windows 7, Windows Server 2008 R2

This topic provides links to tasks and procedures used to administer AppLocker.

AppLocker administration tasks

• Maintaining AppLocker Policies

• Editing an AppLocker Policy

• Testing and Updating an AppLocker Policy

• Deploying AppLocker Policies by Using the Enforce Rules Setting

• Using the AppLocker Windows PowerShell Cmdlets

Procedures for policies

• Configure the Application Identity Service

• Configure an AppLocker Policy for Audit Only

• Configure an AppLocker Policy for Enforce Rules

• Display a Custom URL Message When Users Try to Run a Blocked Application

• Export an AppLocker Policy from a GPO

• Export an AppLocker Policy to an XML File

• Import an AppLocker Policy from Another Computer

• Import an AppLocker Policy into a GPO

• Merge AppLocker Policies by Using Set-ApplockerPolicy

• Merge AppLocker Policies Manually

• Refresh an AppLocker Policy

• Test an AppLocker Policy by Using Test-AppLockerPolicy

Procedures for rules

• Create a Rule that Uses a File Hash Condition

• Create a Rule that Uses a Path Condition

• Create a Rule that Uses a Publisher Condition

• Create AppLocker Default Rules

• Configure Exceptions for an AppLocker Rule

• Delete an AppLocker Rule

• Edit AppLocker Rules

• Enable the DLL Rule Collection

• Enforce AppLocker Rules

• Run the Automatically Generate Rules Wizard

Procedures to administer the AppLocker reference computer

The following procedures are located in the AppLocker Policies Deployment Guide:

• Using a Reference Computer to Create and Maintain AppLocker Policies

  • Determine Which Applications Are Digitally Signed on a Reference Computer

  • Configure the AppLocker Reference Computer