windows-itpro-docs/windows/security/threat-protection/windows-defender-application-control/applocker/configure-exceptions-for-an-applocker-rule.md

title, description, ms.assetid, ms.reviewer, ms.author, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.localizationpriority, author, manager, audience, ms.collection, ms.topic, ms.date

title	description	ms.assetid	ms.reviewer	ms.author	ms.prod	ms.mktglfcycl	ms.sitesec	ms.pagetype	ms.localizationpriority	author	manager	audience	ms.collection	ms.topic	ms.date
Add exceptions for an AppLocker rule (Windows 10)	This topic for IT professionals describes the steps to specify which apps can or cannot run as exceptions to an AppLocker rule.	d15c9d84-c14b-488d-9f48-bf31ff7ff0c5		dansimp	w10	deploy	library	security	medium	dansimp	dansimp	ITPro	M365-security-compliance	conceptual	09/21/2017

Add exceptions for an AppLocker rule

Applies to

• Windows 10
• Windows Server

This topic for IT professionals describes the steps to specify which apps can or cannot run as exceptions to an AppLocker rule.

Rule exceptions allow you to specify files or folders to exclude from the rule. For more information about exceptions, see Understanding AppLocker rule exceptions.

You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see Administer AppLocker.

To configure exceptions for a rule

1. Open the AppLocker console.

2. Expand the rule collection, right-click the rule that you want to configure exceptions for, and then click Properties.

3. Click the Exceptions tab.

4. In the Add exception box, select the rule type that you want to create, and then click Add.

   • For a publisher exception, click Browse, select the file that contains the publisher to exclude, and then click OK.
   • For a path exception, choose the file or folder path to exclude, and then click OK.
   • For a file hash exception, edit the file hash rule, and click Remove.
   • For a packaged apps exception, click Add to create the exceptions based on reference app and rule scope.