How to use Applocker with GPO to block the running of files

This video shows you how to use AppLocker with a Group Policy Object (GPO) and configure it to block the running of executable files from all users Download folders.
AppLocker only runs on Professional and Enterprise editions of Windows.
Links:
What is AppLocker: docs.microsoft...
AppLocker: docs.microsoft...
Email: [e-mail]
Connect with InfoSec Governance at:
► WEBSITE: isgovern.com
► LINKEDIN: / isgovern
► TWITTER: / isgovern

[@clarkeyi721]

Thanks, never thought of the downloads folder

[@Isgovern]

Not a problem, glad this helped.

[@kanomtom]

Hi this affect the start menu on RDS server i test on

[@Nico-pk4px]

Is there a way to block all folders except for the declared ones (such as Program Files and Windows folders)?

[@Isgovern]

Not that I've seen, I'm afraid, but if you find out, do let us know.

You can use software restriction policies, set de default level as user-level and then add the paths you allow as unrestricted, dont's forget to exclude or add the file types you want to whitelist.

[@beyondcraze2531]

Hello sir, I saw that while you do that task there is a packaged app rule option but in my computer it doesn't have why....? And also I do all of that as what you show us in this video but still applocker is not implemente on that download file application 😢Any suggestions please 🙏

[@jimfbocales6292]

Thank you very much for this video!..