Hello everybody,

I want to use AppLocker to define GPOs which allow users to install some Apps from the Windows Store.

My plan is to deny all apps by one rule and whitelisting the others I want to allow.

I'm running Windows Server 2012 and the clients will be Win 8(.1).

When I create a new rule I have two ways to identify an app:

1) "Use an installed packacked app as a reference"
No apps on Server OS. Of course I can install the Store and install all the apps I want to allow in my network, but it's kind of tricky and not a nice solution if you ask me.

2) "Use a packaged app installer as a reference"
The second solution looks way better to me. Well the question is where can I get the install files?
Do I really have to create the rules on a client system?


Thanks for your help!

Hi,

You cannot get the appx file if the apps are installed from Store.

Otherwise, the denied rule will override the allowed rule. So I think your idea does not work as well. The best way to do this is to install the apps you want, then disable Windows Store.

Thank you for your answer.

If denied will override the allowed rule, I can still work with exceptions, right?

Bcause turning off the Store isn't a nice solution in my eyes (thinking about Updates e.g.).

Yes, Exceptions will work. You may add exception conditions in the denied rule.