none
Applocker audit

    General discussion

  • hello guys, am I able to use Applocker in audit mode for domain computers on what are the applications running? 

    I got around 100 different applications or maybe even more but don't have a base image.  If I create a rule it's asking for a install app reference.

    Does it mean that I need to install all those application in one PC, create an applocker policy and  import it to GPO?

    What's the best way to do this?

      

    Thanks for any input.


    Every second counts..make use of it. Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
    IT Stuff Quick Bytes

    Tuesday, June 24, 2014 1:59 AM

All replies

  • >   If I create a rule it's asking for a install app reference.
     
    Do you "auto generate"? Yes, in this scenario you need to install all
    apps on the computer you want rules for to be auto generated.
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    Wednesday, June 25, 2014 10:01 AM
  • Thanks Martin.

    But Auto Generate will only generate for Microsoft files.

    I was trying my luck, if Applocker can snoop third party files running on remote PC's to be used on applocker.

    Anyway, I guess it's always the hard way that works to achieve things.

    Thank you. :)


    Every second counts..make use of it. Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
    IT Stuff Quick Bytes

    Thursday, June 26, 2014 1:21 AM