Configure AppLocker in Intune

AppLocker is a Windows 7 technology that can block certain executables, apps, installers, and scripts. This video shows how you can use push AppLocker configuration with the help of Intune Configuration Profiles.
In this video, we show how to block the execution of GIMP with the help of AppLocker/XML/Intune.
OMA-URI path used in this video:
./Vendor/MSFT/AppLocker/ApplicationLaunchRestrictions/apps/EXE/Policy

[@lynetteberg4807]

WOw, there were a few things I missed when I created my xml file and built applocker polices to block steam. I literally broke a few things enforcing it to my test group. I have to say I was able to undo it, but not without a fight first. This video helped me see my mistakes. Thank you

[@sukaro3]

Nice job one more time John!!! And thank you for taking my comment in consideration 😊

[@Pilami_]

Bra video!

[@naizamuddin7568]

hyyyyyyy buddy its working for me Thanks a lot

[@ibp4da97]

Thanks for posting this video. Just curious, if I understand correctly Application Control can accomplish the same objective here. I know there are differences where Applocker may be mor suitable depending on org requirements (dll, drivers). Do you have a preference?

[@praveendsouze]

Will this work in Windows 10/11 Pro if policies deployed with Intune?, cos it doesn't work in Win 10/11 Pro with GPO.

[@rashkaViking]

Hi!

[@muhammadhassansiddiqui9129]

Can I use this app locker to allow users to run only Notepad where the user is logged in?

[@tanu14188]

what is the solution if we need to block multiple exe via Intune / Defender .??

[@user-tz2ju6vy4u]

Hi Bro, I tried this steps to block Snipping tool. But its still snipping tool working fine I can't achive this. I tried to block via intune policy still snipping tool working fine I can't achive this. Kindly provide solution to block snipping tool.

[@user-sf5pf2im7s]

I attempted to replicate the steps from your video using the Firefox & VLC apps, but it appears to be blocking essential system apps, such as the calculator. Could you consider creating a new, more comprehensive video tutorial on how to use AppLocker?

[@user-ez5dy1js3j]

Hi

[@user-mh6pd5kh8s]

Is there a way you can block non-admin users from installing Microsoft Store apps on Windows 10/11 Pro?

[@khfedthans]

hi My Intune master friend

[@hengsokdarom7239]

hello Mr. I got problem after i implement applocker to block Telegram and then it also block my deplay setting and microsoft store as well 😢, do you have any solution ?

[@mu5cles]

I've tried this, but get a status of Not Applicable. It is assigned to a group containing the computer account. What is causing this?

[@nasgamers-cs]

Same issue. Blocked Firefox and it's also blocking Teams. Anyone have a solution?

[@AnasAnsari-mq6sp]

I am following the exact same steps, but it blocks all application in my device. What could be the reason?

[@daleduspar9168]

I have tried this and this also blocks MS Teams and thats not on the value,

[@Rideables]

Amazing! It worked for me 💯to block Anydesk as a test victim by the signature. Thank you so much for showing it from all angles - design, where to expect it to appear, which service is responsible for it.