deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-24 23:03:42 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

fixing spacing issues

Browse Source
This commit is contained in:
Brian Lich
2016-05-25 15:19:12 -07:00
parent 657bac8dc6
commit f83e6d198c
41 changed files with 1484 additions and 1996 deletions
Download Patch File Download Diff File Expand all files Collapse all files

53
windows/keep-secure/windows-installer-rules-in-applocker.md
View File

@ -2,59 +2,36 @@
title: Windows Installer rules in AppLocker (Windows 10)
description: This topic describes the file formats and available default rules for the Windows Installer rule collection.
ms.assetid: 3fecde5b-88b3-4040-81fa-a2d36d052ec9
ms.pagetype: security
ms.prod: W10
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
author: brianlic-msft
---
# Windows Installer rules in AppLocker
**Applies to**
- Windows 10
This topic describes the file formats and available default rules for the Windows Installer rule collection.
AppLocker defines Windows Installer rules to include only the following file formats:
- .msi
- .msp
- .mst
The purpose of this collection is to allow you to control the installation of files on client computers and servers through Group Policy or the Local Security Policy snap-in. The following table lists the default rules that are available for the Windows Installer rule collection.
<table>
<colgroup>
<col width="25%" />
<col width="25%" />
<col width="25%" />
<col width="25%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Purpose</th>
<th align="left">Name</th>
<th align="left">User</th>
<th align="left">Rule condition type</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>Allow members of the local Administrators group to run all Windows Installer files</p></td>
<td align="left"><p>(Default Rule) All Windows Installer files</p></td>
<td align="left"><p>BUILTIN\Administrators</p></td>
<td align="left"><p>Path: *</p></td>
</tr>
<tr class="even">
<td align="left"><p>Allow all users to run Windows Installer files that are digitally signed</p></td>
<td align="left"><p>(Default Rule) All digitally signed Windows Installer files</p></td>
<td align="left"><p>Everyone</p></td>
<td align="left"><p>Publisher: * (all signed files)</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Allow all users to run Windows Installer files that are located in the Windows Installer folder</p></td>
<td align="left"><p>(Default Rule) All Windows Installer files in %systemdrive%\Windows\Installer</p></td>
<td align="left"><p>Everyone</p></td>
<td align="left"><p>Path: %windir%\Installer\*</p></td>
</tr>
</tbody>
</table>
| Purpose | Name | User | Rule condition type |
| - | - | - | - |
| Allow members of the local Administrators group to run all Windows Installer files| (Default Rule) All Windows Installer files| BUILTIN\Administrators| Path: *|
| Allow all users to run Windows Installer files that are digitally signed | (Default Rule) All digitally signed Windows Installer files| Everyone| Publisher: * (all signed files)|
| Allow all users to run Windows Installer files that are located in the Windows Installer folder | (Default Rule) All Windows Installer files in %systemdrive%\Windows\Installer| Everyone| Path: %windir%\Installer\*|
 
## Related topics
[Understanding AppLocker default rules](understanding-applocker-default-rules.md)
- [Understanding AppLocker default rules](understanding-applocker-default-rules.md)