Windows 10: Why is Applocker not working? Windows 11

Due to the growing problems with online security I decided to use Applocker, Window's built in app which has the pontetial to protect you device from viruses. However, after creating some rules, I noticed Applocker wasn't blocking anything. I had enforced all the rule, but it still stayed the same. Am I doing something wrong?

:)

 

applocker publisher information cannot extracted Windows 10 only

Hi,

In order for us to know where the issue is coming from, we'd like to get the following information:

• Is this the first time that you'll be using AppLocker in Windows 10?
• Have you made any changes or applied an update to your device before the issue occurred?
• What troubleshooting steps have you tried so far?
• If possible, kindly send us a screenshot of the complete error message you're getting and the AppLocker you're using.

Looking forward to your response.

 

AppLocker on Windows 11 Home?

So from my understanding, AppLocker is now supported on all editions of Windows 10/11. But I'm testing it out on a machine with Windows 11 Home and absolutely cannot get it to work no matter what I try.



Also I understand the Group Policy Editor doesn't work on Home, but I have a pre-made policy in XML format.

I thought I could set it by using Powershell's "Set-AppLockerPolicy", but even though the command works, the policy does not seem to have any effect. For example if I make an explicit rule to deny a certain script or exe from running, it can still run.

But the weird thing is in the event viewer log, it does say "The AppLocker policy was applied successfully to this computer." (Event 8001).

And even when I use "Test-AppLockerPolicy" with the local policy, it says it should have worked, with the effective policy for a file showing 'Denied', but it is not when actually trying to run it.

I looked in the registry and noticed that the SRPV2 key that supposedly holds the rules does not update at all. So I even tried manually adding the rules by copying the registry keys from another computer but that didn't work either. I also tried enabling the "Application Identity" service, but that also didn't help. And yes the Windows installation itself is all up to date, and yes the policy does have the rules set to enforcement enabled.

At this point I'm assuming to actually get it to work you need to use Mobile Device Management so the computer needs to be hooked up to a domain or whatever? But according to this article, I see that it says older versions like before 2004 can only be managed with MDM, implying that newer versions don't have to be.

 

AppLocker Blocks Windows Store Apps Downloads

It's now March 2017, this problem is dragging on since August 2015. I've installed Windows 10 Pro in total 4 times on two machines because of this issue.

My conclusion is that some installer changes the working of AppLocker. But, Windows 10 Pro lacks the ability to change AppLocker settings (you cannot even switch on or off its identity service).

Interestingly, the many people here on 'answers'.microsoft.com trying to answer this question all come up with the same suggestions that do not work (in my case):

• wsreset.exe or run the troubleshooter for apps (https://support.microsoft.com/en-us...790db/run-the-troubleshooter-for-windows-apps)
• Adjust the settings of AppLocker in Local Security Policy (in secpol.msc). This obviously does not work because Windows 10 Pro is not supposed to have AppLocker at all. AppLocker is only available in Enterprise versions.
• Fiddle around with permission settings
• Create c:\Windows\AppReadiness
• Reinstall Windows 10 Pro

The Pro in Windows 10 Pro stands for Probably.: Probably you need to reinstall.

For Microsoft (if you want to do something):

a. The trouble shooter mentions a 'possible' problem with the Store cache. But is does not offer/is unable to do a repair

b. Doing a harddisk chkdsk could result in a blue screen of death and a subsequent repair of Windows (to a previous version).

c. Sometimes (at least in my current installed system), it is possible to add a new user to the system, but that user's settings are defected. That user cannot use the start-menu at all, looks like an even more serious problem there.