From a98f723af431b5e6198285d5cac0ceeb6c404925 Mon Sep 17 00:00:00 2001 From: valemieux <98555474+valemieux@users.noreply.github.com> Date: Tue, 10 May 2022 15:41:41 -0700 Subject: [PATCH] 38904851 - Added steps to fully remove AppLocker --- .../applocker/delete-an-applocker-rule.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-application-control/applocker/delete-an-applocker-rule.md b/windows/security/threat-protection/windows-defender-application-control/applocker/delete-an-applocker-rule.md index a644bac95c..3f61052ad2 100644 --- a/windows/security/threat-protection/windows-defender-application-control/applocker/delete-an-applocker-rule.md +++ b/windows/security/threat-protection/windows-defender-application-control/applocker/delete-an-applocker-rule.md @@ -79,3 +79,13 @@ C:\Users\Administrator> Set-AppLockerPolicy -XMLPolicy .\clear.xml ``` This will remove all AppLocker Policies on a machine and could be potentially scripted to use on multiple machines using remote execution tools with accounts with proper access. + +```powershell +appidtel.exe stop [-mionly] +sc.exe config appid start=demand +sc.exe config appidsvc start=demand +sc.exe config applockerfltr start=demand +sc stop applockerfltr +sc stop appidsvc +sc stop appid +``` \ No newline at end of file