Create Default AppLocker Rules
Applies To: Windows Server 2008 R2
Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure.
To create default rules
Click Start, type secpol.msc in the Search programs and files box, and then press ENTER. You can also:
Click Start, and then click Control Panel.
Click System and Security, and then click Administrative Tools.
Double-click Local Security Policy.
If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Yes.
In the console tree, double-click Application Control Policies, and then double-click AppLocker.
Right-click the appropriate rule type for which you want to automatically generate default rules. You can automatically generate rules for executable, Windows Installer, and script rules.
Click Create Default Rules.