mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-13 22:07:22 +00:00
f4bb542824
In this patch, I replaced all occurrences of http://go.microsoft.com with https://go.microsoft.com
33 lines
1.5 KiB
Markdown
33 lines
1.5 KiB
Markdown
---
|
||
title: Optimize AppLocker performance (Windows 10)
|
||
description: This topic for IT professionals describes how to optimize AppLocker policy enforcement.
|
||
ms.assetid: a20efa20-bc98-40fe-bd81-28ec4905e0f6
|
||
ms.prod: w10
|
||
ms.mktglfcycl: deploy
|
||
ms.sitesec: library
|
||
ms.pagetype: security
|
||
author: brianlic-msft
|
||
---
|
||
|
||
# Optimize AppLocker performance
|
||
|
||
**Applies to**
|
||
- Windows 10
|
||
|
||
This topic for IT professionals describes how to optimize AppLocker policy enforcement.
|
||
|
||
## Optimization of Group Policy
|
||
|
||
AppLocker policies can be implemented by organization unit (OU) using Group Policy. If so, your Group Policy infrastructure should be optimized and retested for performance when AppLocker policies are added to existing Group Policy Objects (GPOs) or new GPOs are created, as you do with adding any policies to your GPOs.
|
||
|
||
For more info, see the [Optimizing Group Policy Performance](https://go.microsoft.com/fwlink/p/?LinkId=163238) article in TechNet Magazine.
|
||
|
||
### AppLocker rule limitations
|
||
|
||
The more rules per GPO, the longer AppLocker requires for evaluation. There is no set limitation on the number of rules per GPO, but the number of rules that can fit into a 100 MB GPO varies based on the complexity of the rule, such as the number of file hashes included in a single file hash
|
||
condition.
|
||
|
||
### Using the DLL rule collection
|
||
|
||
When the DLL rule collection is enabled, AppLocker must check each DLL that an application loads. The more DLLs, the longer AppLocker requires to complete the evaluation.
|