deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-11 20:17:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity
windows-itpro-docs/windows/security/threat-protection/windows-defender-application-control/applocker/enable-the-dll-rule-collection.md
Alekhya Jupudi ffb416767d Defender App Guard Link text correction-04 
Change to Learn more about the Windows Defender Application Control feature availability
2021-09-30 11:41:29 +05:30

1.9 KiB
Raw Blame History

title, description, ms.assetid, ms.reviewer, ms.author, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.localizationpriority, author, manager, audience, ms.collection, ms.topic, ms.date, ms.technology
title description ms.assetid ms.reviewer ms.author ms.prod ms.mktglfcycl ms.sitesec ms.pagetype ms.localizationpriority author manager audience ms.collection ms.topic ms.date ms.technology
Enable the DLL rule collection (Windows) This topic for IT professionals describes the steps to enable the DLL rule collection feature for AppLocker. 88ef9561-6eb2-491a-803a-b8cdbfebae27 dansimp m365-security deploy library security medium dansimp dansimp ITPro M365-security-compliance conceptual 09/21/2017 mde

Enable the DLL rule collection

Applies to

  • Windows 10
  • Windows 11
  • Windows Server 2016 and above

Note

Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the Windows Defender Application Control feature availability.

This topic for IT professionals describes the steps to enable the DLL rule collection feature for AppLocker.

The DLL rule collection includes the .dll and .ocx file formats.

For info about these rules, see DLL rules in AppLocker.

You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see Administer AppLocker.

To enable the DLL rule collection

  1. From the AppLocker console, right-click AppLocker, and then click Properties.

  2. Click the Advanced tab, select the Enable the DLL rule collection check box, and then click OK.

    Important:  Before you enforce DLL rules, make sure that there are allow rules for each DLL that is used by any of the allowed apps.