7 Commits

Author SHA1 Message Date
Nicholas Brower
1ae3f0b230 Merged PR 4822: "msdate update (generated from most recent commit date)"
"msdate update (generated from most recent commit date)"
2017-12-05 22:36:05 +00:00
John Tobin
1ece79b062 Reformat Applies to section of Applocker topics. 2017-09-21 10:20:08 -07:00
John Tobin
ad70a71fd4 Add 'Windows Server' to Applies to: in Applocker topics. 2017-09-20 12:06:04 -07:00
Justin Hall
29ab6d569d fixed syntax 2017-07-11 12:02:21 -07:00
Justin Hall
cd812d03bb copyedits 2017-07-11 11:35:40 -07:00
Kaushik Ainapure
66763a225b Document how to clear Applocker rules on an individual system and remote systems
In order to clear AppLocker policies from a machine you must use the Set-AppLockerPolicy cmdlet with the -XMLPolicy parameter using a .XML file which contains the following contents:

<AppLockerPolicy Version="1">
  <RuleCollection Type="Exe" EnforcementMode="NotConfigured" />
  <RuleCollection Type="Msi" EnforcementMode="NotConfigured" />
  <RuleCollection Type="Script" EnforcementMode="NotConfigured" />
  <RuleCollection Type="Dll" EnforcementMode="NotConfigured" />
</AppLockerPolicy>

To use the Set-AppLockerPolicy cmdlet, we must first import the Applocker modules.  To do this:

PS C:\Users\Administrator> import-module AppLocker

We will create a file for example called clear.xml and place it in the same directory that we are executing our cmdlet.  And fill it with the XML Contents above.  Then you must execute using the following command:

C:\Users\Administrator> Set-AppLockerPolicy -XMLPolicy .\clear.xml

This will remove all AppLocker Policies on a machine and could be potentially scripted to use on multiple machines using remote execution tools with accounts with proper access.
2017-07-11 17:58:51 +05:30
Brian Lich
33c3fb2e74 New TOC for docs.microsoft.com 2017-04-19 14:12:47 -07:00