I read in Features removed or planned for replacement starting with Windows 10, version 1803 that Applocker was replacing Software Restriction Policies. I upgraded to 1803 (Windows 10 Pro 64-bit), and set up an initial Applocker configuration. I also edited the Registry so that the Application Identity Service would start automatically upon boot. Applocker, however, does not appear to be working when I tried to launch various programs that should be blocked by Applocker. I noted in the Event Viewer Event 8008: appidsvc.dll: AppLocker component not available on this SKU, for each of the 4 times that I have rebooted the PC Three Questions: 1. Am I doing something incorrectly based upon what I shared, and if so, what is the fix? 2. Is there some other setup item that I need to do? 3. Is Applocker simply still non-functional in Windows 10 Pro 64-bit, even given Microsoft's announcement? Thank you.
If you follow the AppLocker link from the link you included above, it seems to suggest (it is not very clear - to me anyway) it runs on Windows 10 Enterprise, Windows 10 Education and Windows Server 2016. I don't see Pro. Your link also says if you can used Windows Defender Application control.
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/applocker/requirements-to-use-AppLocker Also see this discussion on the issue: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/398
Thank you all. I was able to make appidsvc autostart using the Registry (as described in the original post). Since I'm not running MDM, that appears to explain why I cannot make Applocker work on Windows 10 Pro 1803 64-bit. Back to SRP, it seems, for this particular laptop. Again, much obliged
@chicago25 Hi. According to your first post MS decided to stop developing SRP. Is it currently still working with no problems on 1803?
SRP is still working with no problems on 1803, for me at least. I had to set SRP up again after I deleted my SRP rules when I tried to use Applocker. SRP is working fine right now. What was curious about Applocker was that I could set it up at all. In versions prior to 1803, my recollection was that I could not do that. FWIW.
Thank you for your answer. I hope that they don't decide to remove it entirely in some of next updates.
