Click the Start button and on the Start screen type mmc.Alternatively, you can configure a Group Policy Object for your domain following the instructions in “ How to Create and Link a Group Policy Object in Active Directory” on Petri. Let’s start by configuring a management console. Configure an MMC console (Image Credit: Russell Smith) In this article, I’ll show you how to set up AppLocker in Local Computer policy in Windows Server 2012 R2, but you could easily apply the same settings to multiple computers using Active Directory Group Policy. Configure AppLockerĪppLocker is much easier to set up than Software Restriction Policies (SRP), which is the Windows XP technology that AppLocker replaces. That’s where AppLocker comes in, by preventing users from running installer packages or scripts that haven’t been identified as trusted by IT. Removing administrative privileges from users goes a long way in protecting devices from unwanted configuration change and malware, but alone doesn’t provide protection against scripts and portable software that might install itself into the user’s profile. AppLocker is only available in Enterprise and Ultimate editions of Windows. In today’s Ask the Admin, I’ll show you how best to set up application control policies in Windows using AppLocker.ĪppLocker was introduced in Windows 7 and can be used to prevent users from running executables, scripts, Windows Installer packages, and Windows Store apps (Windows 8 and higher) in Windows 7, Windows Server 2008 R2 and later.

Applocker gpo windows server 2016