deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-11 04:47:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity
windows-itpro-docs/education/windows/tutorial-deploy-apps-winse/create-policies.md
Megan Bradley f025a78cde status
2025-01-10 20:12:36 -07:00

13 KiB
Raw Blame History

title, description, ms.date, ms.topic, appliesto
title description ms.date ms.topic appliesto
Create Policies To Enable Applications In Windows 11 SE Learn how to create policies to enable the installation and execution of apps on Windows SE. 12/02/2024 tutorial
✅ <a href="https://learn.microsoft.com/windows/release-health/supported-versions-windows-client" target="_blank">Windows 11 SE, version 22H2 and later</a>

Create policies to enable applications

:::row::: :::column span=""::: Icon representing the first phase.
Deploy an application via Microsoft Intune :::column-end::: :::column span=""::: Icon representing the second phase.
Validate the application :::column-end::: :::column span=""::: Icon representing the third phase.
Create additional policies (optional) :::column-end::: :::row-end:::

You can create AppLocker policies to allow apps that are semi-compatible or incompatible with the managed installer to run.

AppLocker policies

Additional AppLocker policies work by configuring other apps to be managed installers. However, since anything downloaded or installed by a managed installer is trusted to run, it creates a significant security risk. For example, if the executable for a third-party browser is set as a managed installer, anything downloaded from that browser will be allowed to run.

To allow apps to run by setting their installers as managed installers, follow the guidance here:

Next steps

Advance to the next article to learn how to deploy the AppLocker policies to Windows 11 SE devices.

[!div class="nextstepaction"] Next: deploy policies >