From ef99c5d7d0c8fed7cb112ca60e17c3466978098b Mon Sep 17 00:00:00 2001
From: jsuther1974 <jsuther@microsoft.com>
Date: Thu, 16 Dec 2021 08:29:32 -0800
Subject: [PATCH] Added RedstoneExtensions to AppLocker XML examples

---
 ...horized-apps-deployed-with-a-managed-installer.md | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/windows/security/threat-protection/windows-defender-application-control/configure-authorized-apps-deployed-with-a-managed-installer.md b/windows/security/threat-protection/windows-defender-application-control/configure-authorized-apps-deployed-with-a-managed-installer.md
index 68dee402b4..fca1d484e0 100644
--- a/windows/security/threat-protection/windows-defender-application-control/configure-authorized-apps-deployed-with-a-managed-installer.md
+++ b/windows/security/threat-protection/windows-defender-application-control/configure-authorized-apps-deployed-with-a-managed-installer.md
@@ -103,6 +103,9 @@ Currently, neither the AppLocker policy creation UI in GPO Editor nor the PowerS
         <ThresholdExtensions>
           <Services EnforcementMode="Enabled" />
         </ThresholdExtensions>
+        <RedstoneExtensions>
+          <SystemApps Allow="Enabled"/>
+        </RedstoneExtensions>
       </RuleCollectionExtensions>
     </RuleCollection>
     <RuleCollection Type="Exe" EnforcementMode="AuditOnly">
@@ -115,6 +118,9 @@ Currently, neither the AppLocker policy creation UI in GPO Editor nor the PowerS
         <ThresholdExtensions>
           <Services EnforcementMode="Enabled" />
         </ThresholdExtensions>
+        <RedstoneExtensions>
+          <SystemApps Allow="Enabled"/>
+        </RedstoneExtensions>
       </RuleCollectionExtensions>
     </RuleCollection>
     ```
@@ -133,6 +139,9 @@ Currently, neither the AppLocker policy creation UI in GPO Editor nor the PowerS
           <ThresholdExtensions>
             <Services EnforcementMode="Enabled" />
           </ThresholdExtensions>
+          <RedstoneExtensions>
+            <SystemApps Allow="Enabled"/>
+          </RedstoneExtensions>
         </RuleCollectionExtensions>
       </RuleCollection>
       <RuleCollection Type="Exe" EnforcementMode="AuditOnly">
@@ -145,6 +154,9 @@ Currently, neither the AppLocker policy creation UI in GPO Editor nor the PowerS
           <ThresholdExtensions>
             <Services EnforcementMode="Enabled" />
           </ThresholdExtensions>
+          <RedstoneExtensions>
+            <SystemApps Allow="Enabled"/>
+          </RedstoneExtensions>
         </RuleCollectionExtensions>
       </RuleCollection>
       <RuleCollection Type="ManagedInstaller" EnforcementMode="AuditOnly">