mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-30 22:27:23 +00:00
2.4 KiB
2.4 KiB
title, description, ms.assetid, ms.reviewer, ms.author, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.localizationpriority, author, manager, audience, ms.collection, ms.topic, ms.date, ms.technology
| title | description | ms.assetid | ms.reviewer | ms.author | ms.prod | ms.mktglfcycl | ms.sitesec | ms.pagetype | ms.localizationpriority | author | manager | audience | ms.collection | ms.topic | ms.date | ms.technology |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| AppLocker functions (Windows 10) | This article for the IT professional lists the functions and security levels for the Software Restriction Policies (SRP) and AppLocker features. | bf704198-9e74-4731-8c5a-ee0512df34d2 | dansimp | m365-security | deploy | library | security | medium | dansimp | dansimp | ITPro | M365-security-compliance | conceptual | 09/21/2017 | mde |
AppLocker functions
Applies to
- Windows 10
- Windows Server
This article for the IT professional lists the functions and security levels for the Software Restriction Policies (SRP) and AppLocker features.
Functions
Here are the SRP functions beginning with Windows Server 2003 and AppLocker functions beginning with Windows Server 2008 R2:
- SaferGetPolicyInformation Function
- SaferCreateLevel Function
- SaferCloseLevel Function
- SaferIdentifyLevel Function
- SaferComputeTokenFromLevel Function
- SaferGetLevelInformation Function
- SaferRecordEventLogEntry Function
- SaferiIsExecutableFileType Function
Security level ID
AppLocker and SRP use the security level IDs to specify the access requirements to files listed in policies. The following table shows those security levels supported in SRP and AppLocker.
| Security level ID | SRP | AppLocker |
|---|---|---|
| SAFER_LEVELID_FULLYTRUSTED | Supported | Supported |
| SAFER_LEVELID_NORMALUSER | Supported | Not supported |
| SAFER_LEVELID_CONSTRAINED | Supported | Not supported |
| SAFER_LEVELID_UNTRUSTED | Supported | Not supported |
| SAFER_LEVELID_DISALLOWED | Supported | Supported |
Note
URL zone ID isn't supported in AppLocker.