mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-20 12:53:38 +00:00
37 lines
2.2 KiB
Markdown
37 lines
2.2 KiB
Markdown
---
|
|
title: Add exceptions for an AppLocker rule
|
|
description: This topic for IT professionals describes the steps to specify which apps can or cannot run as exceptions to an AppLocker rule.
|
|
ms.reviewer:
|
|
ms.author: vinpa
|
|
ms.prod: windows-client
|
|
ms.localizationpriority: medium
|
|
author: vinaypamnani-msft
|
|
manager: aaroncz
|
|
ms.topic: conceptual
|
|
ms.date: 09/21/2017
|
|
ms.technology: itpro-security
|
|
---
|
|
|
|
# Add exceptions for an AppLocker rule
|
|
|
|
>[!NOTE]
|
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
|
|
|
This topic for IT professionals describes the steps to specify which apps can or cannot run as exceptions to an AppLocker rule.
|
|
|
|
Rule exceptions allow you to specify files or folders to exclude from the rule. For more information about exceptions, see [Understanding AppLocker rule exceptions](understanding-applocker-rule-exceptions.md).
|
|
|
|
You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see [Administer AppLocker](administer-applocker.md#bkmk-using-snapins).
|
|
|
|
**To configure exceptions for a rule**
|
|
|
|
1. Open the AppLocker console.
|
|
2. Expand the rule collection, right-click the rule that you want to configure exceptions for, and then click **Properties**.
|
|
3. Click the **Exceptions** tab.
|
|
4. In the **Add exception** box, select the rule type that you want to create, and then click **Add**.
|
|
|
|
- For a publisher exception, click **Browse**, select the file that contains the publisher to exclude, and then click **OK**.
|
|
- For a path exception, choose the file or folder path to exclude, and then click **OK**.
|
|
- For a file hash exception, edit the file hash rule, and click **Remove**.
|
|
- For a packaged apps exception, click **Add** to create the exceptions based on reference app and rule scope.
|