Share via

Configuring AppLocker Rule Exceptions

  • Article

Applies To: Windows Server 2008 R2

Rule exceptions allow you to specify files or folders to exclude from the rule.

Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure.

To configure exceptions for a rule

  1. Click Start, type secpol.msc in the Search programs and files box, and then press ENTER. You can also:

    1. Click Start, and then click Control Panel.

    2. Click System and Security, and then click Administrative Tools.

    3. Double-click Local Security Policy.

  2. Expand Application Control Policies, and then expand AppLocker.

  3. Expand the rule collection, right-click the rule that you want to configure exceptions for, and then click Properties.

  4. Click the Exceptions tab.

  5. In the Add exception box, select the rule type that you want to create, and then click Add.

    • For a publisher exception, click Browse, select the file that contains the publisher to exclude, and then click OK.

    • For a path exception, choose the file or folder path to exclude, and then click OK.

    • For a file hash exception, choose the file or folder path to exclude, and then click OK.

Additional references