windows-itpro-docs/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-functions.md

title, description, ms.localizationpriority, ms.topic, ms.date

title	description	ms.localizationpriority	ms.topic	ms.date
AppLocker functions	This article for the IT professional lists the functions and security levels for the Software Restriction Policies (SRP) and AppLocker features.	medium	conceptual	09/21/2017

AppLocker functions

Note

Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the Windows Defender Application Control feature availability.

This article for the IT professional lists the functions and security levels for the Software Restriction Policies (SRP) and AppLocker features.

Functions

Here are the SRP functions beginning with Windows Server 2003 and AppLocker functions beginning with Windows Server 2008 R2:

• SaferGetPolicyInformation Function
• SaferCreateLevel Function
• SaferCloseLevel Function
• SaferIdentifyLevel Function
• SaferComputeTokenFromLevel Function
• SaferGetLevelInformation Function
• SaferRecordEventLogEntry Function
• SaferiIsExecutableFileType Function

Security level ID

AppLocker and SRP use the security level IDs to specify the access requirements to files listed in policies. The following table shows those security levels supported in SRP and AppLocker.

Security level ID	SRP	AppLocker
SAFER_LEVELID_FULLYTRUSTED	Supported	Supported
SAFER_LEVELID_NORMALUSER	Supported	Not supported
SAFER_LEVELID_CONSTRAINED	Supported	Not supported
SAFER_LEVELID_UNTRUSTED	Supported	Not supported
SAFER_LEVELID_DISALLOWED	Supported	Supported

Note

URL zone ID isn't supported in AppLocker.

Related articles

• AppLocker technical reference