Using applocker to apply a white list to desktops. For programs on the PC the white list is working great. Applocker accurately applies the allow and deny rules which have been setup. For example, I can allow word to all, but deny excel to a subset of users. I am having challenge configuring applocker to allow network based applications to run. For example these three programs are called by the login script. \\SERVER1\SHARE2\PROGRAMS\VIRUSCHK\VIRUSCHK.EXE \\SERVER1\SHARE1\DB\SUBEXIST\APP\SUBEXIST.EXE \\SERVER2\SHARE2\PROGRAMS\READREG\CALC.EXE Since Applocker is in audit mode it records this entry "\\SERVER2\SHARE2\PROGRAMS\READREG\CALC.EXE was allowed to run but would have been prevented from running if the AppLocker policy were enforced." I have tried adding path allow rules using the UNC path and with just the executable name. How do I configure applocker to allow network based programs to run?

I suspect that this is not caused by AppLocker. Can you run these programs properly manually? The programs may be not compatible with UAC. Please see: Some Programs Cannot Access Network Locations When UAC Is Enabled Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Yes, the programs run manually when AppLocker is in audit mode.