Windows 10: Debugging on why the Intune AppLocker Device Configuration Policy failed to be enforced

I am running an Intune managed network of computers. We have an initial APP Lockdown policy deployed by Custom OMA-URI Setting: We used the following XML file:<RuleCollection Type="Exe" EnforcementMode="NotConfigured" > <FilePathRule Id="fd686d83-a829-4351-8ff4-27c7de5755d2" Name="Default Rule All files" Description="Allows members of the local Administrators group to run all applications." UserOrGroupSid="S-1-5-32-544" Action="Allow" > <Conditions> <FilePathCondition Path="*" /> </Conditions> </FilePathRule> <FilePathRule Id="ce9d9fd5-d765

:)

 

Applocker enforcement on Windows 10 Pro

As far as I understand, Applocker can be configured on Windows 10 Enterprise and Server 2012 R2. Would I be able to create a group policy on our 2012 R2 AD server and enforce applocker policies on Windows 10 Pro installations on the domain?

 

Applocker not blocking -- Win10Pro, Applocker configured, AppIDsvc run

• OS: Win10Pro
• Applocker: configured blocking of apps and executables
• Applocker rules: set to enforcing
• Service: AppIDSvc is running

I've been trying to get Edge and a couple other utilities blocked on the laptop to keep distractions to a minimum for my child who uses the computer to study.
However, even after rules are defined, and they are set to enforcing as blocked, the apps and executables are still available to them -- even after a reboot.

I have followed the instructions here: https://social.technet.microsoft.com...10itprogeneral
However, there is still no blocking of the apps or the executables.
Thank you for your consideration.

 

One Policy Overriding the other same type of policy

Hi Aslam_Khan... what policy are you using?

I would recommend using AppLocker policies. The only thing is you need Windows 10 Enterprise Edition to use that policy.

https://www.petri.com/configure-enforce-applock...

Note: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised
on the site before you decide to download and install it.