windows-itpro-docs/windows/keep-secure/requirements-to-use-applocker.md
2016-03-21 11:28:01 -07:00

7.1 KiB

title, description, ms.assetid, ms.prod, ms.mktglfcycl, ms.sitesec, author
title description ms.assetid ms.prod ms.mktglfcycl ms.sitesec author
Requirements to use AppLocker (Windows 10) This topic for the IT professional lists software requirements to use AppLocker on the supported Windows operating systems. dc380535-071e-4794-8f9d-e5d1858156f0 W10 deploy library brianlic-msft

Requirements to use AppLocker

Applies to

  • Windows 10

This topic for the IT professional lists software requirements to use AppLocker on the supported Windows operating systems.

General requirements

To use AppLocker, you need:

  • A device running a supported operating system to create the rules. The computer can be a domain controller.

  • For Group Policy deployment, at least one device with the Group Policy Management Console (GPMC) or Remote Server Administration Tools (RSAT) installed to host the AppLocker rules.

  • Devices running a supported operating system to enforce the AppLocker rules that you create.

Note   You can use Software Restriction Policies with AppLocker, but with some limitations. For more info, see Use AppLocker and Software Restriction Policies in the same domain.

 

Operating system requirements

The following table show the on which operating systems AppLocker features are supported.

Version Can be configured Can be enforced Available rules Notes

Windows 10

Yes

Yes

Packaged apps

Executable

Windows Installer

Script

DLL

You can use the [AppLocker CSP](http://msdn.microsoft.com/library/windows/hardware/dn920019.aspx) to configure AppLocker policies on any edition of Windows 10. You can only manage AppLocker with Group Policy on devices running Windows 10 Enterprise and Windows Server 2016 Technical Preview.

Windows Server 2012 R2

Yes

Yes

Packaged apps

Executable

Windows Installer

Script

DLL

Windows 8.1

Yes

Yes

Packaged apps

Executable

Windows Installer

Script

DLL

Only the Enterprise edition supports AppLocker

Windows RT 8.1

No

No

N/A

Windows Server 2012 Standard

Yes

Yes

Packaged apps

Executable

Windows Installer

Script

DLL

Windows Server 2012 Datacenter

Yes

Yes

Packaged apps

Executable

Windows Installer

Script

DLL

Windows 8 Pro

No

No

N/A

Windows 8 Enterprise

Yes

Yes

Packaged apps

Executable

Windows Installer

Script

DLL

Windows RT

No

No

N/A

Windows Server 2008 R2 Standard

Yes

Yes

Executable

Windows Installer

Script

DLL

Packaged app rules will not be enforced.

Windows Server 2008 R2 Enterprise

Yes

Yes

Executable

Windows Installer

Script

DLL

Packaged app rules will not be enforced.

Windows Server 2008 R2 Datacenter

Yes

Yes

Executable

Windows Installer

Script

DLL

Packaged app rules will not be enforced.

Windows Server 2008 R2 for Itanium-Based Systems

Yes

Yes

Executable

Windows Installer

Script

DLL

Packaged app rules will not be enforced.

Windows 7 Ultimate

Yes

Yes

Executable

Windows Installer

Script

DLL

Packaged app rules will not be enforced.

Windows 7 Enterprise

Yes

Yes

Executable

Windows Installer

Script

DLL

Packaged app rules will not be enforced.

Windows 7 Professional

Yes

No

Executable

Windows Installer

Script

DLL

No AppLocker rules are enforced.

 

AppLocker is not supported on versions of the Windows operating system not listed above. Software Restriction Policies can be used with those versions. However, the SRP Basic User feature is not supported on the above operating systems.

See also

Administer AppLocker

Monitor app usage with AppLocker

Optimize AppLocker performance

Use AppLocker and Software Restriction Policies in the same domain

Manage packaged apps with AppLocker

AppLocker Design Guide