mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-13 13:57:22 +00:00
36 lines
2.2 KiB
Markdown
36 lines
2.2 KiB
Markdown
---
|
|
title: Create a rule that uses a file hash condition
|
|
description: This topic for IT professionals shows how to create an AppLocker rule with a file hash condition.
|
|
ms.localizationpriority: medium
|
|
ms.topic: conceptual
|
|
ms.date: 09/21/2017
|
|
---
|
|
|
|
# Create a rule that uses a file hash condition
|
|
|
|
>[!NOTE]
|
|
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
|
|
|
This topic for IT professionals shows how to create an AppLocker rule with a file hash condition.
|
|
|
|
File hash rules use a system-computed cryptographic hash of the identified file.
|
|
|
|
For info about the file hash condition, see [Understanding the File Hash Rule Condition in AppLocker](understanding-the-file-hash-rule-condition-in-applocker.md).
|
|
|
|
You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer
|
|
AppLocker, see [Administer AppLocker](administer-applocker.md#bkmk-using-snapins).
|
|
|
|
**To create a new rule with a file hash condition**
|
|
|
|
1. Open the AppLocker console, and then click the rule collection that you want to create the rule for.
|
|
2. On the **Action** menu, click **Create New Rule**.
|
|
3. On the **Before You Begin** page, click **Next**.
|
|
4. On the **Permissions** page, select the action (allow or deny) and the user or group that the rule should apply to, and then click **Next**.
|
|
5. On the **Conditions** page, select the **File hash** rule condition, and then click **Next**.
|
|
6. **Browse Files** to locate the targeted application file.
|
|
|
|
>**Note:** You can also click **Browse Folders** which calculates the hash for all the appropriate files relative to the rule collection. To remove hashes individually, click the **Remove** button.
|
|
|
|
7. Click **Next**.
|
|
8. On the **Name** page, either accept the automatically generated rule name or type a new rule name, and then click **Create**.
|