Can anyone help me (or guide me) on setting up Applocker on my PC. I understand general idea, and willing to learn. I want to know general rules to set up. Or if there is already some usefull reading on setting up Applocker can anybody link it to me? And I noticed something, Is it true that Deny has more priority then Allow? As I have put Deny all executables for standard user. And put Allow everyone to execute from Windows and Program Files folders. I bet you already know what happened. I Denys to Log into User account. So First attempt on white-listing was fail Now will do the same but put Program Files and Windows into exceptions. Thank you. EDIT: I can login and run some programs. I think I should put User/Appdate into exception aswell to run one user installed programs (like google Chrome), Am I right?