Applocker App Policy

[Cache]

Hi all

 

Having battled on against various things today trying to get a Windows 10 image (which has taken me all day), the last stumbling block I had was the install failing because my Applocker policy didn't have any rules for Apps, so it denied everything by default.

 

I've created the Default rule which is allow all apps, however wondered if anyone had any suggestions as to a better set of Default Rules to apply to it?

 

Any advice much appreciated!

[Duke5A]

Two top level denies followed by the cleanup allow all. I used this when I was evaluating vanilla Win10 Enterprise, but decided on LTSB, so this really isn't used anymore except to block kids from opening the new control panel.

 

A deny all will stop the Start Menu from functioning.

 

Appx Ruleshide
Action User Name Rule Type Exceptions 
Deny Domain\All Students Microsoft.WindowsStore, from Microsoft Corporation Publisher No 
Deny Domain\All Students windows.immersivecontrolpanel, from Microsoft Corporation Publisher No 
Allow Everyone (Default Rule) All signed packaged apps Publisher No