it works based on digital fingerprint of the application and it will work even name or the location of the application change.īefore AppLocker rules get to work you need to make sure 'Application Identity' service is running. This type of rules kind of risky as if we given a folder path, any files in that particular folder affects from this rule.įile Hash: This criteria is apply to allow or block applications which is not digitally signed.

Path : Using this criteria we can block or allow applications based on the specific folder or file path. Publisher: Using this criteria we can block or allow applications based on its digital signature publish by the software publisher. in each of these containers we can allow or block applications based on 3 criteria. Lets look in to furthure in to this nice feature.Īs explain in part 1 in group policy applocker container there are four nodes called executable rules, windows installer rules,script rules and packaged app rules. In Part 1 i have explain what is 'AppLocker' and use of it. If you still not read the Part 1 you can find it in here.

This is the Part 2 of the AppLocker series.

Windows 10 software restriction policy