Documenting/ Questions about Applocker

Yes, you can do this with AppLocker because AppLocker won't allow the Java-exploitable malware to run. The only way malware runs is if you allow it. Java is not a fat gaping hole; it's a known, trusted process. You prevent malware from running and Java does not get exploited. Problem solved.

 

A standard user can actually write to some locations within \Windows folder.