Applocker and the start button Windows 10

[Didzy]

Hello Folks,

 

I have tried configuring Applocker on our server's GPO. But when I setup the Application Identity service and then GPupdate the client device the start button doesn't respond to left click? I can right click and that works OK but not the left click.

 

I just wondered if anyone has had this and managed to overcome it?

 

I have tried googling but there is not much on the web I could find.

 

Thank you for reading and in advance for any suggestions.

 

Paul

[robyholmes]

From memory if your blocking 'Packaged apps' in App Locker then the Start Menu is classed as one. I think it's 'Start Menu Experience' or something like that.

[Didzy]

Thank you for that RobyHolmes. I have done this as a path app rather than package, would that way still give the same error please?

[robyholmes]

Thank you for that RobyHolmes. I have done this as a path app rather than package, would that way still give the same error please?

 

Are you working in the 'Executable Rules' area rather than 'Packaged app Rules' area? You should have two default rules in that area of: 'Allow - Everyone - Everyone Microsoft Corporation' & 'Allow - Everyone - Everyone Microsoft Windows'

[Didzy]

Thanks for that, here is what we have, I am just trying to Deny VLC player as a test.

 

[Didzy]

Sorry yes and using folder rules.

[robyholmes]

The area I'm talking about is 'Packaged app Rules' rather than 'Executable Rules' as your screenshot is of above. So first check so see what AppLocker rules your enforcing by going to AppLocker in the side navigation and clicking on 'Configure rule enforcement'. You should have a window like this and see if your enforcing 'Packaged app Rules'

 

If your enforcing the rules, you need to have the following default rules in 'Packaged app Rules'.

[Didzy]

Hi RobyHolmes, Thank you for that I am moving forward with this Thanks to your help.