[1709, fcu] App Locker SrpUxSnapIn.dll Error

[TSEARS]

Not sure if anyone else has experienced this issue? I'm trying to lock down built-in Microsoft Apps for a build I am deploying for Exam Laptops.

I've managed to uninstall most of the built-in apps via task sequence on SCCM but I'm trying to block access to the rest, for example, Edge.

 

I'm trying to block access via App Locker, but when I try and add a new Packaged App Rule after selecting the permissions, when I go to select the app it errors with the following:

 

I am currently on Windows 10 Edu build 1709 but have also tried 1703 which still receives the error.

After a bit of Googleing, some suggest that this is only avilable to edit on Windows 10 Enterprise.

 

Has anyone managed to overcome this issue?

[Arthur]

I think it's a known issue...

 

https://social.technet.microsoft.com/Forums/windows/en-US/78e035be-0357-42b3-b308-e01cde23bad7/bug-applocker-gui-in-win10-1703-crashes-when-trying-to-select-a-user?forum=win10itprosecurity

 

I assume you have the latest updates installed on your Windows 10 clients and DCs? There was a different AppLocker bug fixed a month or two ago that would also cause the GPMC to crash.

 

After a bit of Googling, some suggest that this is only available to edit on Windows 10 Enterprise.

Education edition is fine.

 

https://docs.microsoft.com/en-us/windows/security/threat-protection/applocker/requirements-to-use-applocker

 

You can only manage AppLocker with Group Policy on devices running Windows 10 Enterprise, Windows 10 Education, and Windows Server 2016.

[TSEARS]

Thanks for the information, really hope Microsoft fix this bug soon. For now, I'll have to look up the PowerShell commands!

[clareq]

Create the GPO in the local group policy editor, export it and import it into the domain GPO.