How to Control Windows Store Apps in Windows 8/8.1 With AppLocker
AppLocker is only available in Windows 8+ Enterprise and Windows Server 2012+. AppLocker in Windows 8 gives IT complete control over which desktop and Windows Store apps users can run, and Windows Store apps are even easier to manage than desktop apps.
Using the Group Policy Management Console (GPMC) on a Windows 8+ management station, we’ll need to edit an existing Group Policy Object (GPO) for our AppLocker policies that applies to Computer objects. In the GPO, find your way to Computer Configuration > Policies > Windows Settings > Security Settings > Application Control Policies > AppLocker.
Under AppLocker, you’ll see the areas for Executable Rules, Windows Installer Rules, Script Rules, and the new Packaged app Rules.
Creating the default rule:
Creating additional rules:
Turning on AppLocker:
If we run a quick gpupdate.exe on our test system, we can try running the OneDrive packaged app to see what happens.
Warnings about deny by default:
If you’re planning on denying all packaged apps by default and only allowing end users to run specific apps. So make sure you set an Allow rule for some of the default applications. Specifically, the PC settings app and the operating system needs the PC settings app, but other apps, such as Check Point VPN or F5 VPN, may be necessary in your environment as well. You may also need to remove packaged apps when you deploy Windows 8.x to computers so that end users don’t have tiles or shortcuts for apps they can’t use.
Source: Free Articles from ArticlesFactory.com
ABOUT THE AUTHOR