Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support. Learn how to configure a device running Windows 10 Enterprise or Windows 10 Education, version and earlier, so that users can only run a few specific apps. The result is similar to a kiosk devicebut with multiple apps available.

For example, you might set up a library computer so that users can search the catalog and browse the Internet, but can't run any other apps or change computer settings. For devices running Windows 10, versionwe recommend the multi-app kiosk method. Microsoft applocker windows 10 professional free can restrict users to a specific set of apps on a device running Windows 10 Enterprise or Windows 10 Education by using AppLocker.

AppLocker rules specify which apps are allowed to run on the device. AppLocker rules are organized into collections based on file format. If no AppLocker rules for a specific rule collection exist, all files with that file format are allowed to run. However, when an AppLocker rule for a specific rule collection is created, only the files explicitly allowed in a rule are permitted to run.

For more information, see How AppLocker works. This topic describes how to lock down apps on a local device. You can also use AppLocker to set rules for applications in a domain by using Group Policy. First, install the desired apps on the device for the target user account s. For UWP apps, you must log on as that user for the app to install. For desktop apps, you can install an app for all users without logging on to the particular account. After you install the desired apps, set up AppLocker rules to only allow specific apps, and block everything else.

Check Configured under Executable rulesand then click OK. Right-click Executable Rules and microsoft applocker windows 10 professional free click Automatically generate rules. On the Rule Preferences page, click Next. Be patient, it might take awhile to generate the rules. On microsoft applocker windows 10 professional free Review Rules page, click Create. The wizard will now create a set of rules allowing the installed set of apps. Then use the dialog to choose a different user or group of users.

Before AppLocker will enforce rules, the Application Identity service must be turned on. To force the Application Identity service to automatically start on reset, open a command prompt and run:.

In addition to specifying the apps that users can run, you should also restrict some settings and functions on the device. For a more secure experience, we recommend that you make the following configuration changes to the device:. Review the policy settings available in Device Installation Restrictions for the settings applicable to your situation.

Note To prevent microsoft applocker windows 10 professional free policy from affecting a member of the Administrators group, in Device Installation Restrictionsenable Allow administrators to override Device Installation Restriction policies.

To learn more about locking down features, see Customizations for Windows 10 Enterprise. Configure the Start menu on the device to only show tiles for the permitted apps. You will make the microsoft applocker windows 10 professional free manually, export the layout to an.

For instructions, see Manage Windows 10 Start layout options. Skip to main content. This browser is no longer supported. Download Microsoft Edge More info. Table of contents Exit focus mode. Table of contents. Note For devices running Windows 10, versionwe recommend the multi-app kiosk method. In this article.

What Is AppLocker (Windows) - Windows security | Microsoft Docs.http://replace.me