mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-13 13:57:22 +00:00
Merge branch 'master' into aljupudi-w11defender-branch02
This commit is contained in:
commit
8f36911b6a
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: AppLocker settings (Windows 10)
|
title: AppLocker settings (Windows)
|
||||||
description: This topic for the IT professional lists the settings used by AppLocker.
|
description: This topic for the IT professional lists the settings used by AppLocker.
|
||||||
ms.assetid: 9cb4aa19-77c0-4415-9968-bd07dab86839
|
ms.assetid: 9cb4aa19-77c0-4415-9968-bd07dab86839
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# AppLocker settings
|
# AppLocker settings
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This topic for the IT professional lists the settings used by AppLocker.
|
This topic for the IT professional lists the settings used by AppLocker.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: AppLocker technical reference (Windows 10)
|
title: AppLocker technical reference (Windows)
|
||||||
description: This overview topic for IT professionals provides links to the topics in the technical reference.
|
description: This overview topic for IT professionals provides links to the topics in the technical reference.
|
||||||
ms.assetid: 2b2678f8-c46b-4e1d-b8c5-037c0be255ab
|
ms.assetid: 2b2678f8-c46b-4e1d-b8c5-037c0be255ab
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# AppLocker technical reference
|
# AppLocker technical reference
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This overview topic for IT professionals provides links to the topics in the technical reference.
|
This overview topic for IT professionals provides links to the topics in the technical reference.
|
||||||
AppLocker advances the application control features and functionality of Software Restriction Policies. AppLocker contains new capabilities and extensions that allow you to create rules to allow or deny apps from running based on unique identities of files and to specify which users or groups can run those apps.
|
AppLocker advances the application control features and functionality of Software Restriction Policies. AppLocker contains new capabilities and extensions that allow you to create rules to allow or deny apps from running based on unique identities of files and to specify which users or groups can run those apps.
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Configure an AppLocker policy for audit only (Windows 10)
|
title: Configure an AppLocker policy for audit only (Windows)
|
||||||
description: This topic for IT professionals describes how to set AppLocker policies to Audit only within your IT environment by using AppLocker.
|
description: This topic for IT professionals describes how to set AppLocker policies to Audit only within your IT environment by using AppLocker.
|
||||||
ms.assetid: 10bc87d5-cc7f-4500-b7b3-9006e50afa50
|
ms.assetid: 10bc87d5-cc7f-4500-b7b3-9006e50afa50
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Configure an AppLocker policy for audit only
|
# Configure an AppLocker policy for audit only
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This topic for IT professionals describes how to set AppLocker policies to **Audit only** within your IT environment by using AppLocker.
|
This topic for IT professionals describes how to set AppLocker policies to **Audit only** within your IT environment by using AppLocker.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Configure an AppLocker policy for enforce rules (Windows 10)
|
title: Configure an AppLocker policy for enforce rules (Windows)
|
||||||
description: This topic for IT professionals describes the steps to enable the AppLocker policy enforcement setting.
|
description: This topic for IT professionals describes the steps to enable the AppLocker policy enforcement setting.
|
||||||
ms.assetid: 5dbbb290-a5ae-4f88-82b3-21e95972e66c
|
ms.assetid: 5dbbb290-a5ae-4f88-82b3-21e95972e66c
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Configure an AppLocker policy for enforce rules
|
# Configure an AppLocker policy for enforce rules
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This topic for IT professionals describes the steps to enable the AppLocker policy enforcement setting.
|
This topic for IT professionals describes the steps to enable the AppLocker policy enforcement setting.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Add exceptions for an AppLocker rule (Windows 10)
|
title: Add exceptions for an AppLocker rule (Windows)
|
||||||
description: This topic for IT professionals describes the steps to specify which apps can or cannot run as exceptions to an AppLocker rule.
|
description: This topic for IT professionals describes the steps to specify which apps can or cannot run as exceptions to an AppLocker rule.
|
||||||
ms.assetid: d15c9d84-c14b-488d-9f48-bf31ff7ff0c5
|
ms.assetid: d15c9d84-c14b-488d-9f48-bf31ff7ff0c5
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Add exceptions for an AppLocker rule
|
# Add exceptions for an AppLocker rule
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This topic for IT professionals describes the steps to specify which apps can or cannot run as exceptions to an AppLocker rule.
|
This topic for IT professionals describes the steps to specify which apps can or cannot run as exceptions to an AppLocker rule.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Configure the AppLocker reference device (Windows 10)
|
title: Configure the AppLocker reference device (Windows)
|
||||||
description: This topic for the IT professional describes the steps to create an AppLocker policy platform structure on a reference computer.
|
description: This topic for the IT professional describes the steps to create an AppLocker policy platform structure on a reference computer.
|
||||||
ms.assetid: 034bd367-146d-4956-873c-e1e09e6fefee
|
ms.assetid: 034bd367-146d-4956-873c-e1e09e6fefee
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Configure the AppLocker reference device
|
# Configure the AppLocker reference device
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This topic for the IT professional describes the steps to create an AppLocker policy platform structure on a reference computer.
|
This topic for the IT professional describes the steps to create an AppLocker policy platform structure on a reference computer.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Configure the Application Identity service (Windows 10)
|
title: Configure the Application Identity service (Windows)
|
||||||
description: This topic for IT professionals shows how to configure the Application Identity service to start automatically or manually.
|
description: This topic for IT professionals shows how to configure the Application Identity service to start automatically or manually.
|
||||||
ms.assetid: dc469599-37fd-448b-b23e-5b8e4f17e561
|
ms.assetid: dc469599-37fd-448b-b23e-5b8e4f17e561
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Configure the Application Identity service
|
# Configure the Application Identity service
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This topic for IT professionals shows how to configure the Application Identity service to start automatically or manually.
|
This topic for IT professionals shows how to configure the Application Identity service to start automatically or manually.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Create a rule for packaged apps (Windows 10)
|
title: Create a rule for packaged apps (Windows)
|
||||||
description: This article for IT professionals shows how to create an AppLocker rule for packaged apps with a publisher condition.
|
description: This article for IT professionals shows how to create an AppLocker rule for packaged apps with a publisher condition.
|
||||||
ms.assetid: e4ffd400-7860-47b3-9118-0e6853c3dfa0
|
ms.assetid: e4ffd400-7860-47b3-9118-0e6853c3dfa0
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Create a rule for packaged apps
|
# Create a rule for packaged apps
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This article for IT professionals shows how to create an AppLocker rule for packaged apps with a publisher condition.
|
This article for IT professionals shows how to create an AppLocker rule for packaged apps with a publisher condition.
|
||||||
|
|
||||||
@ -32,7 +37,7 @@ Packaged apps, also known as Universal Windows apps, are based on an app model t
|
|||||||
- Package name
|
- Package name
|
||||||
- Package version
|
- Package version
|
||||||
|
|
||||||
All the files within a package as well as the package installer share these attributes. Therefore, an AppLocker rule for a packaged app controls both the installation as well as the running of the app. Otherwise, the publisher rules for packaged apps are no different than the rest of the rule collections; they support exceptions, can be increased or decreased in scope, and can be assigned to users and groups.
|
All the files within a package and the package installers share these attributes. Therefore, an AppLocker rule for a packaged app controls both the installation and the running of the app. Otherwise, the publisher rules for packaged apps are no different than the rest of the rule collections; they support exceptions, can be increased or decreased in scope, and can be assigned to users and groups.
|
||||||
|
|
||||||
For info about the publisher condition, see [Understanding the publisher rule condition in AppLocker](understanding-the-publisher-rule-condition-in-applocker.md).
|
For info about the publisher condition, see [Understanding the publisher rule condition in AppLocker](understanding-the-publisher-rule-condition-in-applocker.md).
|
||||||
|
|
||||||
@ -67,7 +72,7 @@ You can perform this task by using the Group Policy Management Console for an Ap
|
|||||||
<tr class="even">
|
<tr class="even">
|
||||||
<td align="left"><p><b>Use a packaged app installer as a reference</b></p></td>
|
<td align="left"><p><b>Use a packaged app installer as a reference</b></p></td>
|
||||||
<td align="left"><p>If selected, AppLocker requires you to choose an app installer on which to base your new rule. A packaged app installer has the .appx extension. AppLocker uses the publisher, package name, and package version of the installer to define the rule.</p></td>
|
<td align="left"><p>If selected, AppLocker requires you to choose an app installer on which to base your new rule. A packaged app installer has the .appx extension. AppLocker uses the publisher, package name, and package version of the installer to define the rule.</p></td>
|
||||||
<td align="left"><p>Your company has developed a number of internal line-of-business packaged apps. The app installers are stored on a common file share. Employees can install the required apps from that file share. You want to allow all your employees to install the Payroll app from this share. So you choose this option from the wizard, browse to the file share, and choose the installer for the Payroll app as a reference to create your rule.</p></td>
|
<td align="left"><p>Your company has developed many internal line-of-business packaged apps. The app installers are stored on a common file share. Employees can install the required apps from that file share. You want to allow all your employees to install the Payroll app from this share. So you choose this option from the wizard, browse to the file share, and choose the installer for the Payroll app as a reference to create your rule.</p></td>
|
||||||
</tr>
|
</tr>
|
||||||
</tbody>
|
</tbody>
|
||||||
</table>
|
</table>
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Create a rule that uses a file hash condition (Windows 10)
|
title: Create a rule that uses a file hash condition (Windows)
|
||||||
description: This topic for IT professionals shows how to create an AppLocker rule with a file hash condition.
|
description: This topic for IT professionals shows how to create an AppLocker rule with a file hash condition.
|
||||||
ms.assetid: eb3b3524-1b3b-4979-ba5a-0a0b1280c5c7
|
ms.assetid: eb3b3524-1b3b-4979-ba5a-0a0b1280c5c7
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Create a rule that uses a file hash condition
|
# Create a rule that uses a file hash condition
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This topic for IT professionals shows how to create an AppLocker rule with a file hash condition.
|
This topic for IT professionals shows how to create an AppLocker rule with a file hash condition.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Create a rule that uses a path condition (Windows 10)
|
title: Create a rule that uses a path condition (Windows)
|
||||||
description: This topic for IT professionals shows how to create an AppLocker rule with a path condition.
|
description: This topic for IT professionals shows how to create an AppLocker rule with a path condition.
|
||||||
ms.assetid: 9b2093f5-5976-45fa-90c3-da1e0e845d95
|
ms.assetid: 9b2093f5-5976-45fa-90c3-da1e0e845d95
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Create a rule that uses a path condition
|
# Create a rule that uses a path condition
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This topic for IT professionals shows how to create an AppLocker rule with a path condition.
|
This topic for IT professionals shows how to create an AppLocker rule with a path condition.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Create a rule that uses a publisher condition (Windows 10)
|
title: Create a rule that uses a publisher condition (Windows)
|
||||||
description: This topic for IT professionals shows how to create an AppLocker rule with a publisher condition.
|
description: This topic for IT professionals shows how to create an AppLocker rule with a publisher condition.
|
||||||
ms.assetid: 345ad45f-2bc1-4c4c-946f-17804e29f55b
|
ms.assetid: 345ad45f-2bc1-4c4c-946f-17804e29f55b
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Create a rule that uses a publisher condition
|
# Create a rule that uses a publisher condition
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This topic for IT professionals shows how to create an AppLocker rule with a publisher condition.
|
This topic for IT professionals shows how to create an AppLocker rule with a publisher condition.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Create AppLocker default rules (Windows 10)
|
title: Create AppLocker default rules (Windows)
|
||||||
description: This topic for IT professionals describes the steps to create a standard set of AppLocker rules that will allow Windows system files to run.
|
description: This topic for IT professionals describes the steps to create a standard set of AppLocker rules that will allow Windows system files to run.
|
||||||
ms.assetid: 21e9dc68-a6f4-4ebe-ac28-4c66a7ab6e18
|
ms.assetid: 21e9dc68-a6f4-4ebe-ac28-4c66a7ab6e18
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Create AppLocker default rules
|
# Create AppLocker default rules
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This topic for IT professionals describes the steps to create a standard set of AppLocker rules that will allow Windows system files to run.
|
This topic for IT professionals describes the steps to create a standard set of AppLocker rules that will allow Windows system files to run.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Create a list of apps deployed to each business group (Windows 10)
|
title: Create a list of apps deployed to each business group (Windows)
|
||||||
description: This topic describes the process of gathering app usage requirements from each business group to implement application control policies by using AppLocker.
|
description: This topic describes the process of gathering app usage requirements from each business group to implement application control policies by using AppLocker.
|
||||||
ms.assetid: d713aa07-d732-4bdc-8656-ba616d779321
|
ms.assetid: d713aa07-d732-4bdc-8656-ba616d779321
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Create a list of apps deployed to each business group
|
# Create a list of apps deployed to each business group
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This topic describes the process of gathering app usage requirements from each business group in order to implement application control policies by using AppLocker.
|
This topic describes the process of gathering app usage requirements from each business group in order to implement application control policies by using AppLocker.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Create Your AppLocker policies (Windows 10)
|
title: Create Your AppLocker policies (Windows)
|
||||||
description: This overview topic for the IT professional describes the steps to create an AppLocker policy and prepare it for deployment.
|
description: This overview topic for the IT professional describes the steps to create an AppLocker policy and prepare it for deployment.
|
||||||
ms.assetid: d339dee2-4da2-4d4a-b46e-f1dfb7cb4bf0
|
ms.assetid: d339dee2-4da2-4d4a-b46e-f1dfb7cb4bf0
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Create Your AppLocker policies
|
# Create Your AppLocker policies
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This overview topic for the IT professional describes the steps to create an AppLocker policy and prepare it for deployment.
|
This overview topic for the IT professional describes the steps to create an AppLocker policy and prepare it for deployment.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Create Your AppLocker rules (Windows 10)
|
title: Create Your AppLocker rules (Windows)
|
||||||
description: This topic for the IT professional describes what you need to know about AppLocker rules and the methods that you can to create rules.
|
description: This topic for the IT professional describes what you need to know about AppLocker rules and the methods that you can to create rules.
|
||||||
ms.assetid: b684a3a5-929c-4f70-8742-04088022f232
|
ms.assetid: b684a3a5-929c-4f70-8742-04088022f232
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Create Your AppLocker rules
|
# Create Your AppLocker rules
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This topic for the IT professional describes what you need to know about AppLocker rules and the methods that you can to create rules.
|
This topic for the IT professional describes what you need to know about AppLocker rules and the methods that you can to create rules.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Delete an AppLocker rule (Windows 10)
|
title: Delete an AppLocker rule (Windows)
|
||||||
description: This article for IT professionals describes the steps to delete an AppLocker rule.
|
description: This article for IT professionals describes the steps to delete an AppLocker rule.
|
||||||
ms.assetid: 382b4be3-0df9-4308-89b2-dcf9df351eb5
|
ms.assetid: 382b4be3-0df9-4308-89b2-dcf9df351eb5
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Delete an AppLocker rule
|
# Delete an AppLocker rule
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This article for IT professionals describes the steps to delete an AppLocker rule.
|
This article for IT professionals describes the steps to delete an AppLocker rule.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Deploy AppLocker policies by using the enforce rules setting (Windows 10)
|
title: Deploy AppLocker policies by using the enforce rules setting (Windows)
|
||||||
description: This topic for IT professionals describes the steps to deploy AppLocker policies by using the enforcement setting method.
|
description: This topic for IT professionals describes the steps to deploy AppLocker policies by using the enforcement setting method.
|
||||||
ms.assetid: fd3a3d25-ff3b-4060-8390-6262a90749ba
|
ms.assetid: fd3a3d25-ff3b-4060-8390-6262a90749ba
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Deploy AppLocker policies by using the enforce rules setting
|
# Deploy AppLocker policies by using the enforce rules setting
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This topic for IT professionals describes the steps to deploy AppLocker policies by using the enforcement setting method.
|
This topic for IT professionals describes the steps to deploy AppLocker policies by using the enforcement setting method.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Deploy the AppLocker policy into production (Windows 10)
|
title: Deploy the AppLocker policy into production (Windows)
|
||||||
description: This topic for the IT professional describes the tasks that should be completed before you deploy AppLocker application control settings.
|
description: This topic for the IT professional describes the tasks that should be completed before you deploy AppLocker application control settings.
|
||||||
ms.assetid: ebbb1907-92dc-499e-8cee-8e637483c9ae
|
ms.assetid: ebbb1907-92dc-499e-8cee-8e637483c9ae
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Deploy the AppLocker policy into production
|
# Deploy the AppLocker policy into production
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This topic for the IT professional describes the tasks that should be completed before you deploy AppLocker application control settings.
|
This topic for the IT professional describes the tasks that should be completed before you deploy AppLocker application control settings.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Determine the Group Policy structure and rule enforcement (Windows 10)
|
title: Determine the Group Policy structure and rule enforcement (Windows)
|
||||||
description: This overview topic describes the process to follow when you are planning to deploy AppLocker rules.
|
description: This overview topic describes the process to follow when you are planning to deploy AppLocker rules.
|
||||||
ms.assetid: f435fcbe-c7ac-4ef0-9702-729aab64163f
|
ms.assetid: f435fcbe-c7ac-4ef0-9702-729aab64163f
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Determine the Group Policy structure and rule enforcement
|
# Determine the Group Policy structure and rule enforcement
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This overview topic describes the process to follow when you are planning to deploy AppLocker rules.
|
This overview topic describes the process to follow when you are planning to deploy AppLocker rules.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Find digitally signed apps on a reference device (Windows 10)
|
title: Find digitally signed apps on a reference device (Windows)
|
||||||
description: This topic for the IT professional describes how to use AppLocker logs and tools to determine which applications are digitally signed.
|
description: This topic for the IT professional describes how to use AppLocker logs and tools to determine which applications are digitally signed.
|
||||||
ms.assetid: 24609a6b-fdcb-4083-b234-73e23ff8bcb8
|
ms.assetid: 24609a6b-fdcb-4083-b234-73e23ff8bcb8
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Determine which apps are digitally signed on a reference device
|
# Determine which apps are digitally signed on a reference device
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This topic for the IT professional describes how to use AppLocker logs and tools to determine which applications are digitally signed.
|
This topic for the IT professional describes how to use AppLocker logs and tools to determine which applications are digitally signed.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Determine your application control objectives (Windows 10)
|
title: Determine your application control objectives (Windows)
|
||||||
description: Determine which applications to control and how to control them by comparing Software Restriction Policies (SRP) and AppLocker.
|
description: Determine which applications to control and how to control them by comparing Software Restriction Policies (SRP) and AppLocker.
|
||||||
ms.assetid: 0e84003e-6095-46fb-8c4e-2065869bb53b
|
ms.assetid: 0e84003e-6095-46fb-8c4e-2065869bb53b
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Determine your application control objectives
|
# Determine your application control objectives
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This article helps with decisions you need to make to determine what applications to control and how to control them by comparing Software Restriction Policies (SRP) and AppLocker.
|
This article helps with decisions you need to make to determine what applications to control and how to control them by comparing Software Restriction Policies (SRP) and AppLocker.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Display a custom URL message when users try to run a blocked app (Windows 10)
|
title: Display a custom URL message when users try to run a blocked app (Windows)
|
||||||
description: This topic for IT professionals describes the steps for displaying a customized message to users when an AppLocker policy denies access to an app.
|
description: This topic for IT professionals describes the steps for displaying a customized message to users when an AppLocker policy denies access to an app.
|
||||||
ms.assetid: 9a2534a5-d1fa-48a9-93c6-989d4857cf85
|
ms.assetid: 9a2534a5-d1fa-48a9-93c6-989d4857cf85
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Display a custom URL message when users try to run a blocked app
|
# Display a custom URL message when users try to run a blocked app
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This topic for IT professionals describes the steps for displaying a customized message to users when an AppLocker policy denies access to an app.
|
This topic for IT professionals describes the steps for displaying a customized message to users when an AppLocker policy denies access to an app.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: DLL rules in AppLocker (Windows 10)
|
title: DLL rules in AppLocker (Windows)
|
||||||
description: This topic describes the file formats and available default rules for the DLL rule collection.
|
description: This topic describes the file formats and available default rules for the DLL rule collection.
|
||||||
ms.assetid: a083fd08-c07e-4534-b0e7-1e15d932ce8f
|
ms.assetid: a083fd08-c07e-4534-b0e7-1e15d932ce8f
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# DLL rules in AppLocker
|
# DLL rules in AppLocker
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This topic describes the file formats and available default rules for the DLL rule collection.
|
This topic describes the file formats and available default rules for the DLL rule collection.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Document Group Policy structure & AppLocker rule enforcement (Windows 10)
|
title: Document Group Policy structure & AppLocker rule enforcement (Windows)
|
||||||
description: This planning topic describes what you need to investigate, determine, and record in your application control policies plan when you use AppLocker.
|
description: This planning topic describes what you need to investigate, determine, and record in your application control policies plan when you use AppLocker.
|
||||||
ms.assetid: 389ffa8e-11fc-49ff-b0b1-89553e6fb6e5
|
ms.assetid: 389ffa8e-11fc-49ff-b0b1-89553e6fb6e5
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Document the Group Policy structure and AppLocker rule enforcement
|
# Document the Group Policy structure and AppLocker rule enforcement
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This planning topic describes what you need to investigate, determine, and record in your application control policies plan when you use AppLocker.
|
This planning topic describes what you need to investigate, determine, and record in your application control policies plan when you use AppLocker.
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
---
|
---
|
||||||
title: Document your app list (Windows 10)
|
title: Document your app list (Windows)
|
||||||
description: This planning topic describes the app information that you should document when you create a list of apps for AppLocker policies.
|
description: This planning topic describes the app information that you should document when you create a list of apps for AppLocker policies.
|
||||||
ms.assetid: b155284b-f75d-4405-aecf-b74221622dc0
|
ms.assetid: b155284b-f75d-4405-aecf-b74221622dc0
|
||||||
ms.reviewer:
|
ms.reviewer:
|
||||||
@ -21,8 +21,13 @@ ms.technology: mde
|
|||||||
# Document your app list
|
# Document your app list
|
||||||
|
|
||||||
**Applies to**
|
**Applies to**
|
||||||
- Windows 10
|
|
||||||
- Windows Server
|
- Windows 10
|
||||||
|
- Windows 11
|
||||||
|
- Windows Server 2016 and above
|
||||||
|
|
||||||
|
>[!NOTE]
|
||||||
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Defender App Guard feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||||||
|
|
||||||
This planning topic describes the app information that you should document when you create a list of apps for AppLocker policies.
|
This planning topic describes the app information that you should document when you create a list of apps for AppLocker policies.
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user