deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-13 05:47:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Update delete-an-applocker-rule.md

Browse Source
This commit is contained in:
Denise Vangel-MSFT 2020-11-09 09:41:32 -08:00 committed by GitHub
parent b374e475c2
commit a14da36922
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
windows/security/threat-protection/windows-defender-application-control/applocker/delete-an-applocker-rule.md
View File

@ -1,6 +1,6 @@
--- ---
title: Delete an AppLocker rule (Windows 10) title: Delete an AppLocker rule (Windows 10)
description: This topic for IT professionals describes the steps to delete an AppLocker rule. description: This article for IT professionals describes the steps to delete an AppLocker rule.
ms.assetid: 382b4be3-0df9-4308-89b2-dcf9df351eb5 ms.assetid: 382b4be3-0df9-4308-89b2-dcf9df351eb5
ms.reviewer: ms.reviewer:
ms.author: dansimp ms.author: dansimp
@ -14,7 +14,7 @@ manager: dansimp
audience: ITPro audience: ITPro
ms.collection: M365-security-compliance ms.collection: M365-security-compliance
ms.topic: conceptual ms.topic: conceptual
ms.date: 08/02/2018 ms.date: 11/09/2020
--- ---
# Delete an AppLocker rule # Delete an AppLocker rule
@ -23,7 +23,7 @@ ms.date: 08/02/2018
- Windows 10 - Windows 10
- Windows Server - Windows Server
This topic for IT professionals describes the steps to delete an AppLocker rule. This article for IT professionals describes the steps to delete an AppLocker rule.
As older apps are retired and new apps are deployed in your organization, it will be necessary to modify the application control policies. If an app becomes unsupported by the IT department or is no longer allowed due to the organization's security policy, then deleting the rule or rules associated with that app will prevent the app from running. As older apps are retired and new apps are deployed in your organization, it will be necessary to modify the application control policies. If an app becomes unsupported by the IT department or is no longer allowed due to the organization's security policy, then deleting the rule or rules associated with that app will prevent the app from running.
@ -34,20 +34,19 @@ AppLocker, see [Administer AppLocker](administer-applocker.md#bkmk-using-snapins
These steps apply only for locally managed devices. If the device has AppLocker policies applied by using MDM or a GPO, the local policy will not override those settings. These steps apply only for locally managed devices. If the device has AppLocker policies applied by using MDM or a GPO, the local policy will not override those settings.
**To delete a rule in an AppLocker policy** ## To delete a rule in an AppLocker policy
1. Open the AppLocker console. 1. Open the AppLocker console.
2. Click the appropriate rule collection for which you want to delete the rule. 2. Click the appropriate rule collection for which you want to delete the rule.
3. In the details pane, right-click the rule to delete, click **Delete**, and then click **Yes**. 3. In the details pane, right-click the rule to delete, click **Delete**, and then click **Yes**.
> [!Note] > [!Note]
> > - When using Group Policy, the Group Policy Object must be distributed or refreshed for rule deletion to take effect on devices.
> - When using Group Policy, for the rule deletion to take effect on computers within the domain, the GPO must be distributed or refreshed. > - Application Identity service needs to be running for deleting Applocker rules. If you disable Applocker and delete Applocker rules, make sure to stop the Application Identity service after deleting Applocker rules. If the Application Identity service is stopped before deleting Applocker rules, and if Applocker blocks apps that are disabled, delete all of the files at `C:\Windows\System32\AppLocker`.
> - Application Identity service needs to be running for deleting Applocker rules. If you disable Applocker and delete Applocker rules, please stop Application Identity service after deleting Applocker rules. If the Application Identity service was stopped before deleting Applocker rules and if Applocker blocks apps despite being disabled, delete all files under C:\Windows\System32\AppLocker.
When this procedure is performed on the local device, the AppLocker policy takes effect immediately. When the following procedure is performed on the local device, the AppLocker policy takes effect immediately.
**To clear AppLocker policies on a single system or remote systems** ## To clear AppLocker policies on a single system or remote systems
Use the Set-AppLockerPolicy cmdlet with the -XMLPolicy parameter, using an .XML file that contains the following contents: Use the Set-AppLockerPolicy cmdlet with the -XMLPolicy parameter, using an .XML file that contains the following contents:
<AppLockerPolicy Version="1"> <AppLockerPolicy Version="1">