diff --git a/windows/client-management/mdm/applocker-csp.md b/windows/client-management/mdm/applocker-csp.md
index 3121c0e91c..e424e88106 100644
--- a/windows/client-management/mdm/applocker-csp.md
+++ b/windows/client-management/mdm/applocker-csp.md
@@ -7,7 +7,7 @@ ms.topic: article
ms.prod: w10
ms.technology: windows
author: nickbrower
-ms.date: 11/09/2017
+ms.date: 04/24/2018
---
# AppLocker CSP
@@ -430,6 +430,11 @@ The following list shows the apps that may be included in the inbox.
| 59553c14-5701-49a2-9909-264d034deb3d |
|
+
+| Broker plug-in (same as Work or school account) |
+ |
+Microsoft.AAD.BrokerPlugin |
+
| Calculator |
b58171c6-c70c-4266-a2e8-8f9c994f4456 |
@@ -466,6 +471,21 @@ The following list shows the apps that may be included in the inbox.
Microsoft.Windows.Cortana |
+| Cortana Listen UI |
+ |
+CortanaListenUI |
+
+
+| Credentials Dialog Host |
+ |
+Microsoft.CredDialogHost |
+
+
+| Device Portal PIN UX |
+ |
+holopairingapp |
+
+
| Email and accounts |
39cf127b-8c67-c149-539a-c02271d07060 |
Microsoft.AccountsControl |
@@ -536,6 +556,11 @@ The following list shows the apps that may be included in the inbox.
|
+| Holographic Shell |
+ |
+HoloShell |
+
+
| Lumia motion data |
8fc25fd2-4e2e-4873-be44-20e57f6ec52b |
|
@@ -567,6 +592,11 @@ The following list shows the apps that may be included in the inbox.
|
+| Migration UI |
+ |
+MigrationUIApp |
+
+
| MiracastView |
906beeda-b7e6-4ddc-ba8d-ad5031223ef9 |
906beeda-b7e6-4ddc-ba8d-ad5031223ef9 |
@@ -691,6 +721,11 @@ The following list shows the apps that may be included in the inbox.
2a4e62d8-8809-4787-89f8-69d0f01654fb |
+| Settings |
+ |
+SystemSettings |
+
+
| Setup wizard |
07d87655-e4f0-474b-895a-773790ad4a32 |
|
@@ -701,6 +736,11 @@ The following list shows the apps that may be included in the inbox.
|
+| Sign-in for Windows 10 Holographic |
+ |
+WebAuthBridgeInternetSso, WebAuthBridgeInternet, WebAuthBridgeIntranetSso, WebAuthBrokerInternetSso, WebAuthBrokerInternetSso, WebAuthBrokerInternetSso, WebAuthBrokerInternet, WebAuthBrokerIntranetSso, SignIn |
+
+
| Skype |
c3f8e570-68b3-4d6a-bdbb-c0a3f4360a51 |
Microsoft.SkypeApp |
@@ -1360,6 +1400,261 @@ In this example, **MobileGroup0** is the node name. We recommend using a GUID fo
```
+## Example for Windows 10 Holographic for Business
+The following example for Windows 10 Holographic for Business denies all apps and allows the minimum set of [inbox apps](#inboxappsandcomponents) to enable to enable a working device, as well as Settings.
+
+``` syntax
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+```
+
## Recommended deny list for Windows Information Protection
The following example for Windows 10, version 1607 denies known unenlightened Microsoft apps from accessing enterprise data as an allowed app. (An administrator might still use an exempt rule, instead.) This ensures an administrator does not accidentally make these apps Windows Information Protection allowed, and avoid known compatibility issues related to automatic file encryption with these applications.