Merge branch 'master' into aljupudi-w11defender-branch02

This commit is contained in:
Diana Hanson 2021-08-31 17:13:50 -06:00 committed by GitHub
commit 8f36911b6a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
25 changed files with 202 additions and 77 deletions

View File

@ -1,5 +1,5 @@
--- ---
title: AppLocker settings (Windows 10) title: AppLocker settings (Windows)
description: This topic for the IT professional lists the settings used by AppLocker. description: This topic for the IT professional lists the settings used by AppLocker.
ms.assetid: 9cb4aa19-77c0-4415-9968-bd07dab86839 ms.assetid: 9cb4aa19-77c0-4415-9968-bd07dab86839
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# AppLocker settings # AppLocker settings
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This topic for the IT professional lists the settings used by AppLocker. This topic for the IT professional lists the settings used by AppLocker.

View File

@ -1,5 +1,5 @@
--- ---
title: AppLocker technical reference (Windows 10) title: AppLocker technical reference (Windows)
description: This overview topic for IT professionals provides links to the topics in the technical reference. description: This overview topic for IT professionals provides links to the topics in the technical reference.
ms.assetid: 2b2678f8-c46b-4e1d-b8c5-037c0be255ab ms.assetid: 2b2678f8-c46b-4e1d-b8c5-037c0be255ab
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# AppLocker technical reference # AppLocker technical reference
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This overview topic for IT professionals provides links to the topics in the technical reference. This overview topic for IT professionals provides links to the topics in the technical reference.
AppLocker advances the application control features and functionality of Software Restriction Policies. AppLocker contains new capabilities and extensions that allow you to create rules to allow or deny apps from running based on unique identities of files and to specify which users or groups can run those apps. AppLocker advances the application control features and functionality of Software Restriction Policies. AppLocker contains new capabilities and extensions that allow you to create rules to allow or deny apps from running based on unique identities of files and to specify which users or groups can run those apps.

View File

@ -1,5 +1,5 @@
--- ---
title: Configure an AppLocker policy for audit only (Windows 10) title: Configure an AppLocker policy for audit only (Windows)
description: This topic for IT professionals describes how to set AppLocker policies to Audit only within your IT environment by using AppLocker. description: This topic for IT professionals describes how to set AppLocker policies to Audit only within your IT environment by using AppLocker.
ms.assetid: 10bc87d5-cc7f-4500-b7b3-9006e50afa50 ms.assetid: 10bc87d5-cc7f-4500-b7b3-9006e50afa50
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Configure an AppLocker policy for audit only # Configure an AppLocker policy for audit only
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This topic for IT professionals describes how to set AppLocker policies to **Audit only** within your IT environment by using AppLocker. This topic for IT professionals describes how to set AppLocker policies to **Audit only** within your IT environment by using AppLocker.

View File

@ -1,5 +1,5 @@
--- ---
title: Configure an AppLocker policy for enforce rules (Windows 10) title: Configure an AppLocker policy for enforce rules (Windows)
description: This topic for IT professionals describes the steps to enable the AppLocker policy enforcement setting. description: This topic for IT professionals describes the steps to enable the AppLocker policy enforcement setting.
ms.assetid: 5dbbb290-a5ae-4f88-82b3-21e95972e66c ms.assetid: 5dbbb290-a5ae-4f88-82b3-21e95972e66c
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Configure an AppLocker policy for enforce rules # Configure an AppLocker policy for enforce rules
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This topic for IT professionals describes the steps to enable the AppLocker policy enforcement setting. This topic for IT professionals describes the steps to enable the AppLocker policy enforcement setting.

View File

@ -1,5 +1,5 @@
--- ---
title: Add exceptions for an AppLocker rule (Windows 10) title: Add exceptions for an AppLocker rule (Windows)
description: This topic for IT professionals describes the steps to specify which apps can or cannot run as exceptions to an AppLocker rule. description: This topic for IT professionals describes the steps to specify which apps can or cannot run as exceptions to an AppLocker rule.
ms.assetid: d15c9d84-c14b-488d-9f48-bf31ff7ff0c5 ms.assetid: d15c9d84-c14b-488d-9f48-bf31ff7ff0c5
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Add exceptions for an AppLocker rule # Add exceptions for an AppLocker rule
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This topic for IT professionals describes the steps to specify which apps can or cannot run as exceptions to an AppLocker rule. This topic for IT professionals describes the steps to specify which apps can or cannot run as exceptions to an AppLocker rule.

View File

@ -1,5 +1,5 @@
--- ---
title: Configure the AppLocker reference device (Windows 10) title: Configure the AppLocker reference device (Windows)
description: This topic for the IT professional describes the steps to create an AppLocker policy platform structure on a reference computer. description: This topic for the IT professional describes the steps to create an AppLocker policy platform structure on a reference computer.
ms.assetid: 034bd367-146d-4956-873c-e1e09e6fefee ms.assetid: 034bd367-146d-4956-873c-e1e09e6fefee
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Configure the AppLocker reference device # Configure the AppLocker reference device
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This topic for the IT professional describes the steps to create an AppLocker policy platform structure on a reference computer. This topic for the IT professional describes the steps to create an AppLocker policy platform structure on a reference computer.

View File

@ -1,5 +1,5 @@
--- ---
title: Configure the Application Identity service (Windows 10) title: Configure the Application Identity service (Windows)
description: This topic for IT professionals shows how to configure the Application Identity service to start automatically or manually. description: This topic for IT professionals shows how to configure the Application Identity service to start automatically or manually.
ms.assetid: dc469599-37fd-448b-b23e-5b8e4f17e561 ms.assetid: dc469599-37fd-448b-b23e-5b8e4f17e561
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Configure the Application Identity service # Configure the Application Identity service
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This topic for IT professionals shows how to configure the Application Identity service to start automatically or manually. This topic for IT professionals shows how to configure the Application Identity service to start automatically or manually.

View File

@ -1,5 +1,5 @@
--- ---
title: Create a rule for packaged apps (Windows 10) title: Create a rule for packaged apps (Windows)
description: This article for IT professionals shows how to create an AppLocker rule for packaged apps with a publisher condition. description: This article for IT professionals shows how to create an AppLocker rule for packaged apps with a publisher condition.
ms.assetid: e4ffd400-7860-47b3-9118-0e6853c3dfa0 ms.assetid: e4ffd400-7860-47b3-9118-0e6853c3dfa0
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Create a rule for packaged apps # Create a rule for packaged apps
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This article for IT professionals shows how to create an AppLocker rule for packaged apps with a publisher condition. This article for IT professionals shows how to create an AppLocker rule for packaged apps with a publisher condition.
@ -32,7 +37,7 @@ Packaged apps, also known as Universal Windows apps, are based on an app model t
- Package name - Package name
- Package version - Package version
All the files within a package as well as the package installer share these attributes. Therefore, an AppLocker rule for a packaged app controls both the installation as well as the running of the app. Otherwise, the publisher rules for packaged apps are no different than the rest of the rule collections; they support exceptions, can be increased or decreased in scope, and can be assigned to users and groups. All the files within a package and the package installers share these attributes. Therefore, an AppLocker rule for a packaged app controls both the installation and the running of the app. Otherwise, the publisher rules for packaged apps are no different than the rest of the rule collections; they support exceptions, can be increased or decreased in scope, and can be assigned to users and groups.
For info about the publisher condition, see [Understanding the publisher rule condition in AppLocker](understanding-the-publisher-rule-condition-in-applocker.md). For info about the publisher condition, see [Understanding the publisher rule condition in AppLocker](understanding-the-publisher-rule-condition-in-applocker.md).
@ -67,7 +72,7 @@ You can perform this task by using the Group Policy Management Console for an Ap
<tr class="even"> <tr class="even">
<td align="left"><p><b>Use a packaged app installer as a reference</b></p></td> <td align="left"><p><b>Use a packaged app installer as a reference</b></p></td>
<td align="left"><p>If selected, AppLocker requires you to choose an app installer on which to base your new rule. A packaged app installer has the .appx extension. AppLocker uses the publisher, package name, and package version of the installer to define the rule.</p></td> <td align="left"><p>If selected, AppLocker requires you to choose an app installer on which to base your new rule. A packaged app installer has the .appx extension. AppLocker uses the publisher, package name, and package version of the installer to define the rule.</p></td>
<td align="left"><p>Your company has developed a number of internal line-of-business packaged apps. The app installers are stored on a common file share. Employees can install the required apps from that file share. You want to allow all your employees to install the Payroll app from this share. So you choose this option from the wizard, browse to the file share, and choose the installer for the Payroll app as a reference to create your rule.</p></td> <td align="left"><p>Your company has developed many internal line-of-business packaged apps. The app installers are stored on a common file share. Employees can install the required apps from that file share. You want to allow all your employees to install the Payroll app from this share. So you choose this option from the wizard, browse to the file share, and choose the installer for the Payroll app as a reference to create your rule.</p></td>
</tr> </tr>
</tbody> </tbody>
</table> </table>

View File

@ -1,5 +1,5 @@
--- ---
title: Create a rule that uses a file hash condition (Windows 10) title: Create a rule that uses a file hash condition (Windows)
description: This topic for IT professionals shows how to create an AppLocker rule with a file hash condition. description: This topic for IT professionals shows how to create an AppLocker rule with a file hash condition.
ms.assetid: eb3b3524-1b3b-4979-ba5a-0a0b1280c5c7 ms.assetid: eb3b3524-1b3b-4979-ba5a-0a0b1280c5c7
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Create a rule that uses a file hash condition # Create a rule that uses a file hash condition
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This topic for IT professionals shows how to create an AppLocker rule with a file hash condition. This topic for IT professionals shows how to create an AppLocker rule with a file hash condition.

View File

@ -1,5 +1,5 @@
--- ---
title: Create a rule that uses a path condition (Windows 10) title: Create a rule that uses a path condition (Windows)
description: This topic for IT professionals shows how to create an AppLocker rule with a path condition. description: This topic for IT professionals shows how to create an AppLocker rule with a path condition.
ms.assetid: 9b2093f5-5976-45fa-90c3-da1e0e845d95 ms.assetid: 9b2093f5-5976-45fa-90c3-da1e0e845d95
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Create a rule that uses a path condition # Create a rule that uses a path condition
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This topic for IT professionals shows how to create an AppLocker rule with a path condition. This topic for IT professionals shows how to create an AppLocker rule with a path condition.

View File

@ -1,5 +1,5 @@
--- ---
title: Create a rule that uses a publisher condition (Windows 10) title: Create a rule that uses a publisher condition (Windows)
description: This topic for IT professionals shows how to create an AppLocker rule with a publisher condition. description: This topic for IT professionals shows how to create an AppLocker rule with a publisher condition.
ms.assetid: 345ad45f-2bc1-4c4c-946f-17804e29f55b ms.assetid: 345ad45f-2bc1-4c4c-946f-17804e29f55b
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Create a rule that uses a publisher condition # Create a rule that uses a publisher condition
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This topic for IT professionals shows how to create an AppLocker rule with a publisher condition. This topic for IT professionals shows how to create an AppLocker rule with a publisher condition.

View File

@ -1,5 +1,5 @@
--- ---
title: Create AppLocker default rules (Windows 10) title: Create AppLocker default rules (Windows)
description: This topic for IT professionals describes the steps to create a standard set of AppLocker rules that will allow Windows system files to run. description: This topic for IT professionals describes the steps to create a standard set of AppLocker rules that will allow Windows system files to run.
ms.assetid: 21e9dc68-a6f4-4ebe-ac28-4c66a7ab6e18 ms.assetid: 21e9dc68-a6f4-4ebe-ac28-4c66a7ab6e18
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Create AppLocker default rules # Create AppLocker default rules
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This topic for IT professionals describes the steps to create a standard set of AppLocker rules that will allow Windows system files to run. This topic for IT professionals describes the steps to create a standard set of AppLocker rules that will allow Windows system files to run.

View File

@ -1,5 +1,5 @@
--- ---
title: Create a list of apps deployed to each business group (Windows 10) title: Create a list of apps deployed to each business group (Windows)
description: This topic describes the process of gathering app usage requirements from each business group to implement application control policies by using AppLocker. description: This topic describes the process of gathering app usage requirements from each business group to implement application control policies by using AppLocker.
ms.assetid: d713aa07-d732-4bdc-8656-ba616d779321 ms.assetid: d713aa07-d732-4bdc-8656-ba616d779321
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Create a list of apps deployed to each business group # Create a list of apps deployed to each business group
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This topic describes the process of gathering app usage requirements from each business group in order to implement application control policies by using AppLocker. This topic describes the process of gathering app usage requirements from each business group in order to implement application control policies by using AppLocker.

View File

@ -1,5 +1,5 @@
--- ---
title: Create Your AppLocker policies (Windows 10) title: Create Your AppLocker policies (Windows)
description: This overview topic for the IT professional describes the steps to create an AppLocker policy and prepare it for deployment. description: This overview topic for the IT professional describes the steps to create an AppLocker policy and prepare it for deployment.
ms.assetid: d339dee2-4da2-4d4a-b46e-f1dfb7cb4bf0 ms.assetid: d339dee2-4da2-4d4a-b46e-f1dfb7cb4bf0
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Create Your AppLocker policies # Create Your AppLocker policies
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This overview topic for the IT professional describes the steps to create an AppLocker policy and prepare it for deployment. This overview topic for the IT professional describes the steps to create an AppLocker policy and prepare it for deployment.

View File

@ -1,5 +1,5 @@
--- ---
title: Create Your AppLocker rules (Windows 10) title: Create Your AppLocker rules (Windows)
description: This topic for the IT professional describes what you need to know about AppLocker rules and the methods that you can to create rules. description: This topic for the IT professional describes what you need to know about AppLocker rules and the methods that you can to create rules.
ms.assetid: b684a3a5-929c-4f70-8742-04088022f232 ms.assetid: b684a3a5-929c-4f70-8742-04088022f232
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Create Your AppLocker rules # Create Your AppLocker rules
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This topic for the IT professional describes what you need to know about AppLocker rules and the methods that you can to create rules. This topic for the IT professional describes what you need to know about AppLocker rules and the methods that you can to create rules.

View File

@ -1,5 +1,5 @@
--- ---
title: Delete an AppLocker rule (Windows 10) title: Delete an AppLocker rule (Windows)
description: This article for IT professionals describes the steps to delete an AppLocker rule. description: This article for IT professionals describes the steps to delete an AppLocker rule.
ms.assetid: 382b4be3-0df9-4308-89b2-dcf9df351eb5 ms.assetid: 382b4be3-0df9-4308-89b2-dcf9df351eb5
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Delete an AppLocker rule # Delete an AppLocker rule
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This article for IT professionals describes the steps to delete an AppLocker rule. This article for IT professionals describes the steps to delete an AppLocker rule.

View File

@ -1,5 +1,5 @@
--- ---
title: Deploy AppLocker policies by using the enforce rules setting (Windows 10) title: Deploy AppLocker policies by using the enforce rules setting (Windows)
description: This topic for IT professionals describes the steps to deploy AppLocker policies by using the enforcement setting method. description: This topic for IT professionals describes the steps to deploy AppLocker policies by using the enforcement setting method.
ms.assetid: fd3a3d25-ff3b-4060-8390-6262a90749ba ms.assetid: fd3a3d25-ff3b-4060-8390-6262a90749ba
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Deploy AppLocker policies by using the enforce rules setting # Deploy AppLocker policies by using the enforce rules setting
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This topic for IT professionals describes the steps to deploy AppLocker policies by using the enforcement setting method. This topic for IT professionals describes the steps to deploy AppLocker policies by using the enforcement setting method.

View File

@ -1,5 +1,5 @@
--- ---
title: Deploy the AppLocker policy into production (Windows 10) title: Deploy the AppLocker policy into production (Windows)
description: This topic for the IT professional describes the tasks that should be completed before you deploy AppLocker application control settings. description: This topic for the IT professional describes the tasks that should be completed before you deploy AppLocker application control settings.
ms.assetid: ebbb1907-92dc-499e-8cee-8e637483c9ae ms.assetid: ebbb1907-92dc-499e-8cee-8e637483c9ae
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Deploy the AppLocker policy into production # Deploy the AppLocker policy into production
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This topic for the IT professional describes the tasks that should be completed before you deploy AppLocker application control settings. This topic for the IT professional describes the tasks that should be completed before you deploy AppLocker application control settings.

View File

@ -1,5 +1,5 @@
--- ---
title: Determine the Group Policy structure and rule enforcement (Windows 10) title: Determine the Group Policy structure and rule enforcement (Windows)
description: This overview topic describes the process to follow when you are planning to deploy AppLocker rules. description: This overview topic describes the process to follow when you are planning to deploy AppLocker rules.
ms.assetid: f435fcbe-c7ac-4ef0-9702-729aab64163f ms.assetid: f435fcbe-c7ac-4ef0-9702-729aab64163f
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Determine the Group Policy structure and rule enforcement # Determine the Group Policy structure and rule enforcement
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This overview topic describes the process to follow when you are planning to deploy AppLocker rules. This overview topic describes the process to follow when you are planning to deploy AppLocker rules.

View File

@ -1,5 +1,5 @@
--- ---
title: Find digitally signed apps on a reference device (Windows 10) title: Find digitally signed apps on a reference device (Windows)
description: This topic for the IT professional describes how to use AppLocker logs and tools to determine which applications are digitally signed. description: This topic for the IT professional describes how to use AppLocker logs and tools to determine which applications are digitally signed.
ms.assetid: 24609a6b-fdcb-4083-b234-73e23ff8bcb8 ms.assetid: 24609a6b-fdcb-4083-b234-73e23ff8bcb8
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Determine which apps are digitally signed on a reference device # Determine which apps are digitally signed on a reference device
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This topic for the IT professional describes how to use AppLocker logs and tools to determine which applications are digitally signed. This topic for the IT professional describes how to use AppLocker logs and tools to determine which applications are digitally signed.

View File

@ -1,5 +1,5 @@
--- ---
title: Determine your application control objectives (Windows 10) title: Determine your application control objectives (Windows)
description: Determine which applications to control and how to control them by comparing Software Restriction Policies (SRP) and AppLocker. description: Determine which applications to control and how to control them by comparing Software Restriction Policies (SRP) and AppLocker.
ms.assetid: 0e84003e-6095-46fb-8c4e-2065869bb53b ms.assetid: 0e84003e-6095-46fb-8c4e-2065869bb53b
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Determine your application control objectives # Determine your application control objectives
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This article helps with decisions you need to make to determine what applications to control and how to control them by comparing Software Restriction Policies (SRP) and AppLocker. This article helps with decisions you need to make to determine what applications to control and how to control them by comparing Software Restriction Policies (SRP) and AppLocker.

View File

@ -1,5 +1,5 @@
--- ---
title: Display a custom URL message when users try to run a blocked app (Windows 10) title: Display a custom URL message when users try to run a blocked app (Windows)
description: This topic for IT professionals describes the steps for displaying a customized message to users when an AppLocker policy denies access to an app. description: This topic for IT professionals describes the steps for displaying a customized message to users when an AppLocker policy denies access to an app.
ms.assetid: 9a2534a5-d1fa-48a9-93c6-989d4857cf85 ms.assetid: 9a2534a5-d1fa-48a9-93c6-989d4857cf85
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Display a custom URL message when users try to run a blocked app # Display a custom URL message when users try to run a blocked app
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This topic for IT professionals describes the steps for displaying a customized message to users when an AppLocker policy denies access to an app. This topic for IT professionals describes the steps for displaying a customized message to users when an AppLocker policy denies access to an app.

View File

@ -1,5 +1,5 @@
--- ---
title: DLL rules in AppLocker (Windows 10) title: DLL rules in AppLocker (Windows)
description: This topic describes the file formats and available default rules for the DLL rule collection. description: This topic describes the file formats and available default rules for the DLL rule collection.
ms.assetid: a083fd08-c07e-4534-b0e7-1e15d932ce8f ms.assetid: a083fd08-c07e-4534-b0e7-1e15d932ce8f
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# DLL rules in AppLocker # DLL rules in AppLocker
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This topic describes the file formats and available default rules for the DLL rule collection. This topic describes the file formats and available default rules for the DLL rule collection.

View File

@ -1,5 +1,5 @@
--- ---
title: Document Group Policy structure & AppLocker rule enforcement (Windows 10) title: Document Group Policy structure & AppLocker rule enforcement (Windows)
description: This planning topic describes what you need to investigate, determine, and record in your application control policies plan when you use AppLocker. description: This planning topic describes what you need to investigate, determine, and record in your application control policies plan when you use AppLocker.
ms.assetid: 389ffa8e-11fc-49ff-b0b1-89553e6fb6e5 ms.assetid: 389ffa8e-11fc-49ff-b0b1-89553e6fb6e5
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Document the Group Policy structure and AppLocker rule enforcement # Document the Group Policy structure and AppLocker rule enforcement
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This planning topic describes what you need to investigate, determine, and record in your application control policies plan when you use AppLocker. This planning topic describes what you need to investigate, determine, and record in your application control policies plan when you use AppLocker.

View File

@ -1,5 +1,5 @@
--- ---
title: Document your app list (Windows 10) title: Document your app list (Windows)
description: This planning topic describes the app information that you should document when you create a list of apps for AppLocker policies. description: This planning topic describes the app information that you should document when you create a list of apps for AppLocker policies.
ms.assetid: b155284b-f75d-4405-aecf-b74221622dc0 ms.assetid: b155284b-f75d-4405-aecf-b74221622dc0
ms.reviewer: ms.reviewer:
@ -21,8 +21,13 @@ ms.technology: mde
# Document your app list # Document your app list
**Applies to** **Applies to**
- Windows 10
- Windows Server - Windows 10
- Windows 11
- Windows Server 2016 and above
>[!NOTE]
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
This planning topic describes the app information that you should document when you create a list of apps for AppLocker policies. This planning topic describes the app information that you should document when you create a list of apps for AppLocker policies.