Table of contents
TOC
Collapse the table of content
Expand the table of content

Requirements to use AppLocker

Brian Lich|Last Updated: 1/5/2017
|
2 Contributors

Applies to

  • Windows 10

This topic for the IT professional lists software requirements to use AppLocker on the supported Windows operating systems.

General requirements

To use AppLocker, you need:

  • A device running a supported operating system to create the rules. The computer can be a domain controller.
  • For Group Policy deployment, at least one device with the Group Policy Management Console (GPMC) or Remote Server Administration Tools (RSAT) installed to host the AppLocker rules.
  • Devices running a supported operating system to enforce the AppLocker rules that you create.

Note: You can use Software Restriction Policies with AppLocker, but with some limitations. For more info, see Use AppLocker and Software Restriction Policies in the same domain.

Operating system requirements

The following table show the on which operating systems AppLocker features are supported.

VersionCan be configuredCan be enforcedAvailable rulesNotes
Windows 10YesYesPackaged apps
Executable
Windows Installer
Script
DLL
You can use the AppLocker CSP to configure AppLocker policies on any edition of Windows 10. You can only manage AppLocker with Group Policy on devices running Windows 10 Enterprise, Windows 10 Education, and Windows Server 2016.
Windows Server 2016
Windows Server 2012 R2
Windows Server 2012
YesYesPackaged apps
Executable
Windows Installer
Script
DLL
Windows 8.1YesYesPackaged apps
Executable
Windows Installer
Script
DLL
Only the Enterprise edition supports AppLocker
Windows RT 8.1NoNoN/A
Windows 8 ProNoNoN/A
Windows 8 EnterpriseYesYesPackaged apps
Executable
Windows Installer
Script
DLL
Windows RTNoNoN/A
Windows Server 2008 R2 StandardYesYesExecutable
Windows Installer
Script
DLL
Packaged app rules will not be enforced.
Windows Server 2008 R2 EnterpriseYesYesExecutable
Windows Installer
Script
DLL
Packaged app rules will not be enforced.
Windows Server 2008 R2 DatacenterYesYesExecutable
Windows Installer
Script
DLL
Packaged app rules will not be enforced.
Windows Server 2008 R2 for Itanium-Based SystemsYesYesExecutable
Windows Installer
Script
DLL
Packaged app rules will not be enforced.
Windows 7 UltimateYesYesExecutable
Windows Installer
Script
DLL
Packaged app rules will not be enforced.
Windows 7 EnterpriseYesYesExecutable
Windows Installer
Script
DLL
Packaged app rules will not be enforced.
Windows 7 ProfessionalYesNoExecutable
Windows Installer
Script
DLL
No AppLocker rules are enforced.

AppLocker is not supported on versions of the Windows operating system not listed above. Software Restriction Policies can be used with those versions. However, the SRP Basic User feature is not supported on the above operating systems.

See also

© 2017 Microsoft