Shulou(Shulou.com)11/24 Report--

CTOnews.com March 14, Microsoft announced today that it has removed restrictions on AppLocker to facilitate faster deployment by enterprises. This adjustment cancels the version verification check for Win10 2004, 20H2, and 21H2 versions and all Win11 systems.

AppLocker helps businesses control the applications and files that users can run. They include executable files, scripts, Windows installer files, dynamic link libraries (DLL), application packages, and application package installers.

The main functions and features of AppLocker attached to CTOnews.com are as follows:

Define rules based on the file attributes that are permanently used during the application update, such as publisher name (derived from digital signature), product name, file name, and file version. You can also create rules based on file paths and hashes.

Assign rules to security groups or individual users.

Create a rule exception. For example, you can create rules to allow all users to run all Windows binaries except Registry Editor (regedit.exe).

Deploy the policy using audit-only mode and understand its impact before enforcing it.

Create rules on the staging server and test them, then export them to the production environment, and then import them into the Group Policy object.

The creation and management of AppLocker rules can be simplified by using Windows PowerShell.

Microsoft previously needed to make a mandatory distinction between AppLocker policies according to Windows versions and management terminals. For example, if enterprises use MDM to manage, they can deploy AppLocker policies in all Win10 and Win11 versions, while if they use group policies, they can only deploy AppLocker in the enterprise version or shift book of Win10 and Win11.

Microsoft has now eliminated these version checks, making it easier for enterprise administrators to deploy AppLocker in the following Windows and later versions without distinguishing between system versions and management methods:

Windows 11, version 22H2 (KB5017389, released on September 30, 2022)

Windows 11, version 21H2 (KB5018483, released on October 25, 2022)

Windows 10, version 2004 (KB5018482, released on October 25, 2022)

Windows 10, version 20H2

Windows 10, version 21H1

This update also allows IT administrators to use Windows Defender Application Control (WDAC) to deploy the system's Managed Installer policy without having to distinguish between different Windows versions.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.