Windows 10: Why is AppLocker not working on Windows 10 and 11 Home Edition?

I’m trying to get AppLocker working on Windows 10 and 11 Home editions, but it doesn’t seem to work as expected.Initially, secpol.msc was not available, so I installed it using these commands:FOR %F IN "%SystemRoot%\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientTools-Package~*.mum" DO DISM /Online /NoRestart /Add-Package:"%F" FOR %F IN "%SystemRoot%\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientExtensions-Package~*.mum" DO DISM /Online /NoRestart /Add-Package:"%F" After this, secpol is installed on my Windows 10 and 11 Home Single Language machines. I created AppLocke

:)

 

applocker publisher information cannot extracted Windows 10 only

Hi,

In order for us to know where the issue is coming from, we'd like to get the following information:

• Is this the first time that you'll be using AppLocker in Windows 10?
• Have you made any changes or applied an update to your device before the issue occurred?
• What troubleshooting steps have you tried so far?
• If possible, kindly send us a screenshot of the complete error message you're getting and the AppLocker you're using.

Looking forward to your response.

 

AppLocker on Windows 11 Home?

So from my understanding, AppLocker is now supported on all editions of Windows 10/11. But I'm testing it out on a machine with Windows 11 Home and absolutely cannot get it to work no matter what I try.



Also I understand the Group Policy Editor doesn't work on Home, but I have a pre-made policy in XML format.

I thought I could set it by using Powershell's "Set-AppLockerPolicy", but even though the command works, the policy does not seem to have any effect. For example if I make an explicit rule to deny a certain script or exe from running, it can still run.

But the weird thing is in the event viewer log, it does say "The AppLocker policy was applied successfully to this computer." (Event 8001).

And even when I use "Test-AppLockerPolicy" with the local policy, it says it should have worked, with the effective policy for a file showing 'Denied', but it is not when actually trying to run it.

I looked in the registry and noticed that the SRPV2 key that supposedly holds the rules does not update at all. So I even tried manually adding the rules by copying the registry keys from another computer but that didn't work either. I also tried enabling the "Application Identity" service, but that also didn't help. And yes the Windows installation itself is all up to date, and yes the policy does have the rules set to enforcement enabled.

At this point I'm assuming to actually get it to work you need to use Mobile Device Management so the computer needs to be hooked up to a domain or whatever? But according to this article, I see that it says older versions like before 2004 can only be managed with MDM, implying that newer versions don't have to be.

 

How to set up AppLocker restrictions on Windows 10 Pro?

Hello @ahmd, *Smile

If you like, here are out AppLocker tutorials below that may be able to help with this for you.

• Use AppLocker to Allow or Block DLL Files from Running in Windows 10
• Use AppLocker to Allow or Block Executable Files in Windows 10
• Use AppLocker to Allow or Block Script Files in Windows 10
• Use AppLocker to Allow or Block Windows Installer Files in Windows 10
• Use AppLocker to Block Microsoft Store Apps in Windows 10
• Export and Import AppLocker Policy for Rules in Windows 10
• Clear AppLocker Policy in Windows 10
• Delete AppLocker Rule in Windows 10