This tutorial will show you how to use AppLocker to allow or block specified Windows Installer (.msi. Windows Installer rules in AppLocker (Windows 10) | Microsoft Docs.Requirements to use AppLocker (Windows 10) | Microsoft Docs. How AppLocker works (Windows 10) | Microsoft Docs.What Is AppLocker (Windows 10) | Microsoft Docs.AppLocker (Windows 10) | Microsoft Docs.(Default Rule) All Windows Installer files in %systemdrive%\Windows\Installer (Default Rule) All digitally signed Windows Installer filesĪllow all users to run Windows Installer files that are located in the Windows Installer folder (Default Rule) All Windows Installer filesĪllow all users to run Windows Installer files that are digitally signed If you want to block a Windows Installer file allowed by the default rules below, you will need to create a new rule to block (deny) it for a user or group.Īllow members of the local Administrators group to run all Windows Installer files The following table lists the default rules that are available for the Windows Installer rule collection.Īny Windows Installer file not allowed by the default rules below will automatically be blocked by default unless you create a new rule to allow it for a user or group. The purpose of this rule collection is to allow you to control the installation of files on client computers and servers through Group Policy or the Local Security Policy snap-in. These include executable files, scripts, Windows Installer files, dynamic-link libraries (DLLs), packaged apps (aka: Microsoft Store apps), and packaged app installers.ĪppLocker defines Windows Installer rules to include only the. How to Use AppLocker to Allow or Block Windows Installer Files from Running in Windows 10ĪppLocker helps you control which apps and files users can run.