Requirements to use AppLocker

Applies to

  • Windows 10
  • Windows Server

This topic for the IT professional lists software requirements to use AppLocker on the supported Windows operating systems.

General requirements

To use AppLocker, you need:

  • A device running a supported operating system to create the rules. The computer can be a domain controller.
  • For Group Policy deployment, at least one device with the Group Policy Management Console (GPMC) or Remote Server Administration Tools (RSAT) installed to host the AppLocker rules.
  • Devices running a supported operating system to enforce the AppLocker rules that you create.

Note: You can use Software Restriction Policies with AppLocker, but with some limitations. For more info, see Use AppLocker and Software Restriction Policies in the same domain.

Operating system requirements

The following table show the on which operating systems AppLocker features are supported.

Version Can be configured Can be enforced Available rules Notes
Windows 10 Yes Yes Packaged apps
Executable
Windows Installer
Script
DLL
You can use the AppLocker CSP to configure AppLocker policies on any edition of Windows 10 supported by Mobile Device Management (MDM). You can only manage AppLocker with Group Policy on devices running Windows 10 Enterprise, Windows 10 Education, and Windows Server 2016.
Windows Server 2016
Windows Server 2012 R2
Windows Server 2012
Yes Yes Packaged apps
Executable
Windows Installer
Script
DLL
Windows 8.1 Pro Yes No N/A
Windows 8.1 Enterprise Yes Yes Packaged apps
Executable
Windows Installer
Script
DLL
Windows RT 8.1 No No N/A
Windows 8 Pro Yes No N/A
Windows 8 Enterprise Yes Yes Packaged apps
Executable
Windows Installer
Script
DLL
Windows RT No No N/A
Windows Server 2008 R2 Standard Yes Yes Executable
Windows Installer
Script
DLL
Packaged app rules will not be enforced.
Windows Server 2008 R2 Enterprise Yes Yes Executable
Windows Installer
Script
DLL
Packaged app rules will not be enforced.
Windows Server 2008 R2 Datacenter Yes Yes Executable
Windows Installer
Script
DLL
Packaged app rules will not be enforced.
Windows Server 2008 R2 for Itanium-Based Systems Yes Yes Executable
Windows Installer
Script
DLL
Packaged app rules will not be enforced.
Windows 7 Ultimate Yes Yes Executable
Windows Installer
Script
DLL
Packaged app rules will not be enforced.
Windows 7 Enterprise Yes Yes Executable
Windows Installer
Script
DLL
Packaged app rules will not be enforced.
Windows 7 Professional Yes No Executable
Windows Installer
Script
DLL
No AppLocker rules are enforced.

AppLocker is not supported on versions of the Windows operating system not listed above. Software Restriction Policies can be used with those versions. However, the SRP Basic User feature is not supported on the above operating systems.

See also