If an application is not specifically identified by its publisher, installation path, or file hash, the attempt to run the application fails.ĪppLocker can provide an inventory of software usage within your organization, so you can identify the software that corresponds to your software licensing agreements and restrict application usage based on licensing agreements.ĪppLocker policies can be configured to allow only supported or approved applications to run on computers within a business group. Windows PowerShell cmdlets are also available to help you understand application usage and access.ĪppLocker has the ability to deny applications from running simply by excluding them from the list of allowed applications per business group or user. Packaged app Rules : aappx (Windows 8 & 10 only)Īccording to the Microsoft, following benefits can be archived using AppLocker in your organization.ĪppLocker has the ability to enforce its policy in an audit-only mode where all application access activity is collected in event logs for further analysis.

Dynamic-link libraries: dll and ocx (This rule collection has to be enabled as it is not enabled by default).

AppLocker can be used to control the following file types. With Windows 10, AppLocker can be used only with Enterprise and Education editions. AppLocker rules are much more powerful and very easy to implement than Software restriction policies It was introduced with Windows 7 and Windows Server 2008R2 while replacing software restriction policies.

Applocker is a windows feature which can be used to block already installed application from running or prevent installing certain applications.