Windows 10: Patch KB5018482 activates Applocker even in the Pro edition

I found out that the applocker is suddenly active on the PC where this patch was installed and is loading changes from the GPO. I thought it was just a matter of the enterprise edition and servers, at least it was like that until this patch. I even tried it on my home PC and applocker works after the patch. Is this a bug or will it be? Can anyone else confirm this?

:)

 

How to set up AppLocker restrictions on Windows 10 Pro?

I'm installing an office PC in a small business and I was wondering how do I enable AppLocker restrictions?

It seems like I've set them up in the gpedit.msc console, then started up AppIdentity service (set it to auto-run) but no matter what I do, the restrictions are not enabled, even though this site says that AppLocker is supported on Windows 10 Pro.

Any idea how to use that AppLocker on Win10?

PS. I want to white-list which software (executables) and what types of files can be opened on that machine.

 

AppLocker Blocks Windows Store Apps Downloads

It's now March 2017, this problem is dragging on since August 2015. I've installed Windows 10 Pro in total 4 times on two machines because of this issue.

My conclusion is that some installer changes the working of AppLocker. But, Windows 10 Pro lacks the ability to change AppLocker settings (you cannot even switch on or off its identity service).

Interestingly, the many people here on 'answers'.microsoft.com trying to answer this question all come up with the same suggestions that do not work (in my case):

• wsreset.exe or run the troubleshooter for apps (https://support.microsoft.com/en-us...790db/run-the-troubleshooter-for-windows-apps)
• Adjust the settings of AppLocker in Local Security Policy (in secpol.msc). This obviously does not work because Windows 10 Pro is not supposed to have AppLocker at all. AppLocker is only available in Enterprise versions.
• Fiddle around with permission settings
• Create c:\Windows\AppReadiness
• Reinstall Windows 10 Pro

The Pro in Windows 10 Pro stands for Probably.: Probably you need to reinstall.

For Microsoft (if you want to do something):

a. The trouble shooter mentions a 'possible' problem with the Store cache. But is does not offer/is unable to do a repair

b. Doing a harddisk chkdsk could result in a blue screen of death and a subsequent repair of Windows (to a previous version).

c. Sometimes (at least in my current installed system), it is possible to add a new user to the system, but that user's settings are defected. That user cannot use the start-menu at all, looks like an even more serious problem there.

 

Applocker enforcement on Windows 10 Pro

As far as I understand, Applocker can be configured on Windows 10 Enterprise and Server 2012 R2. Would I be able to create a group policy on our 2012 R2 AD server and enforce applocker policies on Windows 10 Pro installations on the domain?