Requirements to Use AppLocker

 

Applies To: Windows 7, Windows 8.1, Windows Server 2008 R2, Windows Server 2012 R2, Windows Server 2012, Windows 8

This topic for the IT professional lists software requirements to use AppLocker on the supported Windows operating systems.

General requirements

To use AppLocker, you need:

  • A computer running a supported operating system to create the rules. The computer can be a domain controller.

  • For Group Policy deployment, at least one computer with the Group Policy Management Console (GPMC) or Remote Server Administration Tools (RSAT) installed to host the AppLocker rules.

  • Computers running a supported operating system to enforce the AppLocker rules that you create.

Note

You can use Software Restriction Policies with AppLocker, but with some limitations. For more information, see Use AppLocker and Software Restriction Policies in the Same Domain.

Operating system requirements

The following table show the on which operating systems AppLocker features are supported.

Version

Can be configured

Can be enforced

Available rules

Notes

Windows Server 2012 R2

Yes

Yes

Packaged apps
Executable
Windows Installer
Script
DLL

Windows 8.1

Yes

Yes

Packaged apps
Executable
Windows Installer
Script
DLL

Only the Enterprise edition supports AppLocker

Windows RT 8.1

No

No

NA

Windows Server 2012 Standard

Yes

Yes

Packaged apps
Executable
Windows Installer
Script
DLL

Windows Server 2012 Datacenter

Yes

Yes

Packaged apps
Executable
Windows Installer
Script
DLL

Windows 8 Pro

No

No

NA

Windows 8 Enterprise

Yes

Yes

Packaged apps
Executable
Windows Installer
Script
DLL

Windows RT

No

No

NA

Windows Server 2008 R2 Standard

Yes

Yes

Executable
Windows Installer
Script
DLL

Packaged app rules will not be enforced.

Windows Server 2008 R2 Enterprise

Yes

Yes

Executable
Windows Installer
Script
DLL

Packaged app rules will not be enforced.

Windows Server 2008 R2 Datacenter

Yes

Yes

Executable
Windows Installer
Script
DLL

Packaged app rules will not be enforced.

Windows Server 2008 R2 for Itanium-Based Systems

Yes

Yes

Executable
Windows Installer
Script
DLL

Packaged app rules will not be enforced.

Windows 7 Ultimate

Yes

Yes

Executable
Windows Installer
Script
DLL

Packaged app rules will not be enforced.

Windows 7 Enterprise

Yes

Yes

Executable
Windows Installer
Script
DLL

Packaged app rules will not be enforced.

Windows 7 Professional

Yes

No

Executable
Windows Installer
Script
DLL

No AppLocker rules are enforced.

AppLocker is not supported on versions of the Windows operating system not listed above. Software Restriction Policies can be used with those versions. However, the SRP Basic User feature is not supported on the above operating systems.

See also

Administer AppLocker

Monitor Application Usage with AppLocker

Optimize AppLocker Performance

Use AppLocker and Software Restriction Policies in the Same Domain

Manage Packaged Apps with AppLocker

AppLocker Policies Design Guide