4.5 KiB
title, description, ms.assetid, ms.reviewer, ms.author, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.localizationpriority, author, manager, audience, ms.collection, ms.topic, ms.date, ms.technology
| title | description | ms.assetid | ms.reviewer | ms.author | ms.prod | ms.mktglfcycl | ms.sitesec | ms.pagetype | ms.localizationpriority | author | manager | audience | ms.collection | ms.topic | ms.date | ms.technology |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| AppLocker deployment guide (Windows) | This topic for IT professionals introduces the concepts and describes the steps required to deploy AppLocker policies. | 38632795-be13-46b0-a7af-487a4340bea1 | dansimp | m365-security | deploy | library | security | medium | dansimp | dansimp | ITPro | M365-security-compliance | conceptual | 09/21/2017 | windows-sec |
AppLocker deployment guide
Applies to
- Windows 10
- Windows 11
- Windows Server 2016 and above
Note
Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the Windows Defender Application Control feature availability.
This topic for IT professionals introduces the concepts and describes the steps required to deploy AppLocker policies.
This guide provides steps based on your design and planning investigation for deploying application control policies by using AppLocker. It is intended for security architects, security administrators, and system administrators. Through a sequential and iterative deployment process, you can create application control policies, test and adjust the policies, and implement a method for maintaining those policies as the needs in your organization change.
This guide covers the use of Software Restriction Policies (SRP) in conjunction with AppLocker policies to control application usage. For a comparison of SRP and AppLocker, see Using Software Restriction Policies and AppLocker policies in this guide. To understand if AppLocker is the correct application control solution for you, see Understand AppLocker policy design decisions.
Prerequisites to deploying AppLocker policies
The following are prerequisites or recommendations to deploying policies:
- Understand the capabilities of AppLocker:
- Document your application control policy deployment plan by addressing these tasks:
- Understand the AppLocker policy deployment process
- Understand AppLocker policy design decisions
- Determine your application control objectives
- Create list of apps deployed to each business group
- Select types of rules to create
- Determine Group Policy Structure and rule enforcement
- Plan for AppLocker policy management
Contents of this guide
This guide provides steps based on your design and planning investigation for deploying application control policies created and maintained by AppLocker for computers running any of the supported versions of Windows listed in Requirements to use AppLocker.
In this section
| Topic | Description |
|---|---|
| Understand the AppLocker policy deployment process | This planning and deployment topic for the IT professional describes the process for using AppLocker when deploying application control policies. |
| Requirements for Deploying AppLocker Policies | This deployment topic for the IT professional lists the requirements that you need to consider before you deploy AppLocker policies. |
| Use Software Restriction Policies and AppLocker policies | This topic for the IT professional describes how to use Software Restriction Policies (SRP) and AppLocker policies in the same Windows deployment. |
| Create Your AppLocker policies | This overview topic for the IT professional describes the steps to create an AppLocker policy and prepare it for deployment. |
| Deploy the AppLocker policy into production | This topic for the IT professional describes the tasks that should be completed before you deploy AppLocker application control settings. |