mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-12 13:27:23 +00:00
Merge remote-tracking branch 'refs/remotes/origin/master' into rs3
This commit is contained in:
jdeckerMS
commit
c56f0efc8c
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Add rules for packaged apps to existing AppLocker rule-set
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes how to update your existing AppLocker policies for packaged apps using the Remote Server Administration Toolkit (RSAT).
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Administer AppLocker
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals provides links to specific procedures to use when administering AppLocker policies.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# AppLocker architecture and components
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professional describes AppLocker’s basic architecture and its major components.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# AppLocker functions
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional lists the functions and security levels for the Software Restriction Policies (SRP) and AppLocker features.
|
||||
|
||||
|
||||
@ -13,7 +13,8 @@ author: brianlic-msft
|
||||
# AppLocker
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic provides a description of AppLocker and can help you decide if your organization can benefit from deploying AppLocker application control policies. AppLocker helps you control which apps and files users can run. These include executable files, scripts, Windows Installer files, dynamic-link libraries (DLLs), packaged apps, and packaged app installers.
|
||||
|
||||
|
||||
@ -13,7 +13,8 @@ author: brianlic-msft
|
||||
# AppLocker deployment guide
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals introduces the concepts and describes the steps required to deploy AppLocker policies.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# AppLocker design guide
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional introduces the design and planning steps required to deploy application control policies by using AppLocker.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# AppLocker policy use scenarios
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional lists the various application control scenarios in which AppLocker policies can be effectively implemented.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# AppLocker processes and interactions
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional describes the process dependencies and interactions when AppLocker evaluates and enforces rules.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# AppLocker settings
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional lists the settings used by AppLocker.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# AppLocker technical reference
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This overview topic for IT professionals provides links to the topics in the technical reference.
|
||||
AppLocker advances the application control features and functionality of Software Restriction Policies. AppLocker contains new capabilities and extensions that allow you to create rules to allow or deny apps from running based on unique identities of files and to specify which users or groups can run those apps.
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Configure an AppLocker policy for audit only
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes how to set AppLocker policies to **Audit only** within your IT environment by using AppLocker.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Configure an AppLocker policy for enforce rules
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes the steps to enable the AppLocker policy enforcement setting.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Add exceptions for an AppLocker rule
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes the steps to specify which apps can or cannot run as exceptions to an AppLocker rule.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Configure the AppLocker reference device
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional describes the steps to create an AppLocker policy platform structure on a reference computer.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Configure the Application Identity service
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals shows how to configure the Application Identity service to start automatically or manually.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Create a rule for packaged apps
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals shows how to create an AppLocker rule for packaged apps with a publisher condition.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Create a rule that uses a file hash condition
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals shows how to create an AppLocker rule with a file hash condition.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Create a rule that uses a path condition
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals shows how to create an AppLocker rule with a path condition.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Create a rule that uses a publisher condition
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals shows how to create an AppLocker rule with a publisher condition.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Create AppLocker default rules
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes the steps to create a standard set of AppLocker rules that will allow Windows system files to run.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Create a list of apps deployed to each business group
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic describes the process of gathering app usage requirements from each business group in order to implement application control policies by using AppLocker.
|
||||
|
||||
|
||||
@ -12,8 +12,8 @@ author: brianlic-msft
|
||||
# Create your AppLocker planning document
|
||||
|
||||
**Applies to**
|
||||
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This planning topic for the IT professional summarizes the information you need to research and include in your AppLocker planning document.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Create Your AppLocker policies
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This overview topic for the IT professional describes the steps to create an AppLocker policy and prepare it for deployment.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Create Your AppLocker rules
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional describes what you need to know about AppLocker rules and the methods that you can to create rules.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Delete an AppLocker rule
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes the steps to delete an AppLocker rule.
|
||||
|
||||
|
||||
@ -9,11 +9,11 @@ ms.pagetype: security
|
||||
author: brianlic-msft
|
||||
---
|
||||
|
||||
|
||||
# Deploy AppLocker policies by using the enforce rules setting
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes the steps to deploy AppLocker policies by using the enforcement setting method.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Deploy the AppLocker policy into production
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional describes the tasks that should be completed before you deploy AppLocker application control settings.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Determine the Group Policy structure and rule enforcement
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This overview topic describes the process to follow when you are planning to deploy AppLocker rules.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Determine which apps are digitally signed on a reference device
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional describes how to use AppLocker logs and tools to determine which applications are digitally signed.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Determine your application control objectives
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic helps you with the decisions you need to make to determine what applications to control and how to control them by comparing Software Restriction Policies (SRP) and AppLocker.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Display a custom URL message when users try to run a blocked app
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes the steps for displaying a customized message to users when an AppLocker policy denies access to an app.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# DLL rules in AppLocker
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic describes the file formats and available default rules for the DLL rule collection.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ ms.pagetype: security
|
||||
# Document the Group Policy structure and AppLocker rule enforcement
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This planning topic describes what you need to investigate, determine, and record in your application control policies plan when you use AppLocker.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Document your application control management processes
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This planning topic describes the AppLocker policy maintenance information to record for your design document.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Document your app list
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This planning topic describes the app information that you should document when you create a list of apps for AppLocker policies.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Document your AppLocker rules
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic describes what rule conditions to associate with each file, how to associate the rule conditions with each file, the source of the rule, and whether the file should be included or excluded.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Edit an AppLocker policy
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes the steps required to modify an AppLocker policy.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Edit AppLocker rules
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes the steps to edit a publisher rule, path rule, and file hash rule in AppLocker.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Enable the DLL rule collection
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes the steps to enable the DLL rule collection feature for AppLocker.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Enforce AppLocker rules
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes how to enforce application control rules by using AppLocker.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Executable rules in AppLocker
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic describes the file formats and available default rules for the executable rule collection.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Export an AppLocker policy from a GPO
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes the steps to export an AppLocker policy from a Group Policy Object (GPO) so that it can be modified.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Export an AppLocker policy to an XML file
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes the steps to export an AppLocker policy to an XML file for review or testing.
|
||||
Membership in the local **Administrators** group, or equivalent, is the minimum required to complete this procedure.
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# How AppLocker works
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional provides links to topics about AppLocker architecture and components, processes and interactions, rules and policies.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Import an AppLocker policy from another computer
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes how to import an AppLocker policy.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Import an AppLocker policy into a GPO
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes the steps to import an AppLocker policy into a Group Policy Object (GPO).
|
||||
AppLocker policies can be created as local security policies and modified like any other local security policy, or they can be created as part of a GPO and managed by using Group Policy. You can create AppLocker policies on any supported computer. For info about which Windows editions are supported, see [Requirements to Use AppLocker](requirements-to-use-applocker.md).
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Maintain AppLocker policies
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic describes how to maintain rules within AppLocker policies.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Manage packaged apps with AppLocker
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes concepts and lists procedures to help you manage Packaged apps with AppLocker as part of your overall application control strategy.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Merge AppLocker policies by using Set-ApplockerPolicy
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes the steps to merge AppLocker policies by using Windows PowerShell.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Merge AppLocker policies manually
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes the steps to manually merge AppLocker policies to update the Group Policy Object (GPO).
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Monitor app usage with AppLocker
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes how to monitor app usage when AppLocker policies are applied.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Optimize AppLocker performance
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes how to optimize AppLocker policy enforcement.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Packaged apps and packaged app installer rules in AppLocker
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic explains the AppLocker rule collection for packaged app installers and packaged apps.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Plan for AppLocker policy management
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for describes the decisions you need to make to establish the processes for managing and maintaining AppLocker policies.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Refresh an AppLocker policy
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes the steps to force an update for an AppLocker policy.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Requirements for deploying AppLocker policies
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This deployment topic for the IT professional lists the requirements that you need to consider before you deploy AppLocker policies.
|
||||
|
||||
|
||||
@ -13,7 +13,8 @@ author: brianlic-msft
|
||||
# Requirements to use AppLocker
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional lists software requirements to use AppLocker on the supported Windows operating systems.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Run the Automatically Generate Rules wizard
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes steps to run the wizard to create AppLocker rules on a reference device.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Script rules in AppLocker
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic describes the file formats and available default rules for the script rule collection.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Security considerations for AppLocker
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional describes the security considerations you need to address when implementing AppLocker.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Select the types of rules to create
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic lists resources you can use when selecting your application control policy rules by using AppLocker.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Test an AppLocker policy by using Test-AppLockerPolicy
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes the steps to test an AppLocker policy prior to importing it into a Group Policy Object (GPO) or another computer.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Test and update an AppLocker policy
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic discusses the steps required to test an AppLocker policy prior to deployment.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Tools to use with AppLocker
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional describes the tools available to create and administer AppLocker policies.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Understand AppLocker enforcement settings
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic describes the AppLocker enforcement settings for rule collections.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Understand AppLocker policy design decisions
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional lists the design questions, possible answers, and ramifications of the decisions when you plan a deployment of application control policies by using AppLocker within a Windows operating system environment.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Understand AppLocker rules and enforcement setting inheritance in Group Policy
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional describes how application control policies configured in AppLocker are applied through Group Policy.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Understand the AppLocker policy deployment process
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This planning and deployment topic for the IT professional describes the process for using AppLocker when deploying application control policies.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Understanding AppLocker allow and deny actions on rules
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic explains the differences between allow and deny actions on AppLocker rules.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Understanding AppLocker default rules
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professional describes the set of rules that can be used to ensure that required Windows system files are allowed to run when the policy is applied.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Understanding AppLocker rule behavior
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic describes how AppLocker rules are enforced by using the allow and deny options in AppLocker.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Understanding AppLocker rule collections
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic explains the five different types of AppLocker rules used to enforce AppLocker policies.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Understanding AppLocker rule condition types
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional describes the three types of AppLocker rule conditions.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Understanding AppLocker rule exceptions
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic describes the result of applying AppLocker rule exceptions to rule collections.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Understanding the file hash rule condition in AppLocker
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic explains the AppLocker file hash rule condition, the advantages and disadvantages, and how it is applied.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Understanding the path rule condition in AppLocker
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic explains the AppLocker path rule condition, the advantages and disadvantages, and how it is applied.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Understanding the publisher rule condition in AppLocker
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic explains the AppLocker publisher rule condition, what controls are available, and how it is applied.
|
||||
|
||||
|
||||
@ -1,3 +1,4 @@
|
||||
|
||||
---
|
||||
title: Use a reference device to create and maintain AppLocker policies (Windows 10)
|
||||
description: This topic for the IT professional describes the steps to create and maintain AppLocker policies by using a reference computer.
|
||||
@ -12,7 +13,8 @@ author: brianlic-msft
|
||||
# Use a reference device to create and maintain AppLocker policies
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional describes the steps to create and maintain AppLocker policies by using a reference computer.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Use AppLocker and Software Restriction Policies in the same domain
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes concepts and procedures to help you manage your application control strategy using Software Restriction Policies and AppLocker.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Use the AppLocker Windows PowerShell cmdlets
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes how each AppLocker Windows PowerShell cmdlet can help you administer your AppLocker application control policies.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Using Event Viewer with AppLocker
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic lists AppLocker events and describes how to use Event Viewer with AppLocker.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Use Software Restriction Policies and AppLocker policies
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional describes how to use Software Restriction Policies (SRP) and AppLocker policies in the same Windows deployment.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# What Is AppLocker?
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for the IT professional describes what AppLocker is and how its features differ from Software Restriction Policies.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Windows Installer rules in AppLocker
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic describes the file formats and available default rules for the Windows Installer rule collection.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Working with AppLocker policies
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals provides links to procedural topics about creating, maintaining, and testing AppLocker policies.
|
||||
|
||||
|
||||
@ -12,7 +12,8 @@ author: brianlic-msft
|
||||
# Working with AppLocker rules
|
||||
|
||||
**Applies to**
|
||||
- Windows 10
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This topic for IT professionals describes AppLocker rule types and how to work with them for your application control policies.
|
||||
|
||||
|
||||
@ -19,7 +19,6 @@ The threat landscape is continually evolving. While hackers are busy developing
|
||||
|
||||
Windows Defender Application Guard (Application Guard) is designed to help prevent old, and newly emerging attacks, to help keep employees productive. Using our unique hardware isolation approach, our goal is to destroy the playbook that attackers use by rendering current attack methods obsolete.
|
||||
|
||||
|
||||
## What is Application Guard and how does it work?
|
||||
Designed for Windows 10 and Microsoft Edge, Application Guard helps to isolate enterprise-defined untrusted sites, protecting your company while your employees browse the Internet. As an enterprise administrator, you define what is among trusted web sites, cloud resources, and internal networks. Everything not on your list is considered untrusted.
|
||||
|
||||
@ -39,8 +38,8 @@ Application Guard has been created to target 3 types of enterprise systems:
|
||||
## In this section
|
||||
|Topic |Description |
|
||||
|------|------------|
|
||||
|[System requirements for Windows Defender Application Guard](reqs-wd-app-guard.md) |Specifies the pre-requisites necessary to install and use Application Guard. |
|
||||
|[Prepare and install Windows Defender Application Guard](install-wd-app-guard.md) |Provides instructions about determining which mode to use, either Standalone or Enterprise-managed, and how to install Application Guard in your organization. |
|
||||
|[System requirements for Windows Defender Application Guard](reqs-wd-app-guard.md) |Specifies the pre-requisites necessary to install and use Application Guard.|
|
||||
|[Prepare and install Windows Defender Application Guard](install-wd-app-guard.md) |Provides instructions about determining which mode to use, either Standalone or Enterprise-managed, and how to install Application Guard in your organization.|
|
||||
|[Configure the Group Policy settings for Windows Defender Application Guard](configure-wd-app-guard.md) |Provides info about the available Group Policy and MDM settings.|
|
||||
|[Testing scenarios using Windows Defender Application Guard in your business or organization](test-scenarios-wd-app-guard.md)|Provides a list of suggested testing scenarios that you can use to test Windows Defender Application Guard (Application Guard) in your organization.|
|
||||
|[Frequently Asked Questions - Windows Defender Application Guard](faq-wd-app-guard.md)|Common questions and answers around the features and functionality of Application Guard.|
|
||||
Loading…
x
Reference in New Issue
Block a user