windows-itpro-docs/windows/security/threat-protection/windows-defender-application-control/applocker/enable-the-dll-rule-collection.md

title, description, ms.assetid, ms.reviewer, ms.author, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.localizationpriority, author, manager, audience, ms.collection, ms.topic, ms.date, ms.technology

title	description	ms.assetid	ms.reviewer	ms.author	ms.prod	ms.mktglfcycl	ms.sitesec	ms.pagetype	ms.localizationpriority	author	manager	audience	ms.collection	ms.topic	ms.date	ms.technology
Enable the DLL rule collection (Windows 10)	This topic for IT professionals describes the steps to enable the DLL rule collection feature for AppLocker.	88ef9561-6eb2-491a-803a-b8cdbfebae27		dansimp	m365-security	deploy	library	security	medium	dansimp	dansimp	ITPro	M365-security-compliance	conceptual	09/21/2017	mde

Enable the DLL rule collection

Applies to

• Windows 10
• Windows Server

This topic for IT professionals describes the steps to enable the DLL rule collection feature for AppLocker.

The DLL rule collection includes the .dll and .ocx file formats.

For info about these rules, see DLL rules in AppLocker.

You can perform this task by using the Group Policy Management Console for an AppLocker policy in a Group Policy Object (GPO) or by using the Local Security Policy snap-in for an AppLocker policy on a local computer or in a security template. For info how to use these MMC snap-ins to administer AppLocker, see Administer AppLocker.

To enable the DLL rule collection

1. From the AppLocker console, right-click AppLocker, and then click Properties.

2. Click the Advanced tab, select the Enable the DLL rule collection check box, and then click OK.

   Important:  Before you enforce DLL rules, make sure that there are allow rules for each DLL that is used by any of the allowed apps.