Here is Microsoft's documentation of the feature. Also, you cannot use AppLocker and Software Restriction policies together. The downside to AppLocker is that it only works on the Enterprise editions of Windows, not the Pro versions. The location to configure the policy is in Computer Configuration -> Windows Settings -> Security Settings -> Application Control Policies. You can also configure allow/deny rules based on paths, file hashes, and publisher/version info in the certificate (if the application/script is signed with one). ps1, etc.) and Windows Universal (.appx) packages.
Not only can you configure executable rules like with SRP, you can also set policies for MSI installers, scripts (.bat. If you are running the Enterprise version of Windows 7, 8/8.1, or 10, you can use AppLocker to configure this policy through the local Group Policy editor ( gpedit).ĪppLocker is far superior to Software Restriction Policies.
