Windows 10: Win10ent Applocker -- cannot configure AppIDsvc

Logged in as local administrator (not joined to a domain)
Windows 10 Enterprise

Application Identity Properties (Local Computer): if I change any attribute, then hit apply or ok, I get this message:




If I log in to a command shell as Administrator, then execute:

c:\Windows\system32> sc config appidsvc start=auto

I can get it to be configured to auto start

However, when I then try to edit the other options, I similarly get denied, again:

c:\Windows\system32> sc failure appidsvc reset=86400 actions=restart/1000/restart/1000/retart/1000
[SC] ChangeServiceConfig2 FAILED 5:

Access is denied.



How do I gain access as an admin to make the changes? My account is an administrative local account on the machine, and it is not joined to the domain.



:)

 

Start menu/ms-settings not working Windows 10

Yes I can see that, but I'm running Windows 10 Home edition.

To terminate AppLocker rule enforcement

• 
  Backup the Group Policy Object (GPO) that contains the currently applied AppLocker rules.
  
• 
  Delete all the AppLocker rules on that GPO. For steps how to do this, see the topics in
  
  AppLocker Policy Procedures.
  
• 
  Push out the GPO that now contains the empty AppLocker policy to the affected client computers. For steps how to do this, see
  
  Refresh an AppLocker Policy.
  
• 
  Disable the AppLocker service (appidsvc) on all the affected client computers. Optionally, you can restart the service. For steps how to do this, see
  
  Configure the Application Identity Service. Alternatively, you can disable the AppLocker service using Group Policy instead of locally.
  
• 
  Optionally, if you want to update the computers with another set of AppLocker rules (and the service has been enabled), you force a Group Policy update for the revised AppLocker policy. For steps how to do this, see
  
  Refresh an AppLocker Policy.
  

There is no Group policy object editor available here. Also
AppIDSvc is stopped and can't be manually started. Error: "The operation could not be completed. The dependency service or group failed to start" due to fact, that AppLocker is not available in Home and Pro edition.

So why is it blocking the reinstallation, I don't know?

 

Applocker enforcement on Windows 10 Pro

As far as I understand, Applocker can be configured on Windows 10 Enterprise and Server 2012 R2. Would I be able to create a group policy on our 2012 R2 AD server and enforce applocker policies on Windows 10 Pro installations on the domain?

 

you must use the 'sc' utility, and you can only configure the 'start= ' option. You can also start/stop it from the shell. No other options are configurable.