Create an AppLocker instant alert event Applocker will not always display a pop-up alert when something is blocked, especially DLLs, and will only silently log, which can be rather frustrating because something may not work right and the user won't know unless they check the Event Viewer logs. Here is a tutorial on how to create a Task Scheduler event that will instantly alert you whenever a specific file type is blocked: How to create an AppLocker file block event alert: 1. Open Task Scheduler as an administrator 2. Select “Create Task…” button 3. Under the “General” tab do the following: a) Name: whatever you want eg: “AppLocker file block event” b) Description: eg: “Displays an alert whenever AppLocker blocks an executable or DLL file type” c) Select Change User or Group… button, and change to “users” d) Configure for: select drop-down and choose: “Windows 7, Windows Server 2008 R2” “OK” 4. Under the “Triggers” tab do the following: a) Select: New… button b) Begin the task: from drop-down box select “On an event” c) Log: “Microsoft-Windows-AppLocker/EXE and DLL” d) Source: “AppLocker” e) Event ID: “8004” f) Place a checkmark in the “Enabled” box “OK” 5. Under the “Actions” tab do the following: a) Select: New… button b) Action: from drop-down select “Display a message” c) Title: type your customized title eg: “AppLocker Block – Executables and DLLs” d) Message: type your customized message eg: WARNING! AppLocker blocked a file from launching.” “OK” 6. Under the “Conditions” tab do the following: a) Place checkmarks for “Start the task if the computer is on AC power” “OK” 7. Under the “Settings” tab do the following: a) place checkmarks in: “Allow the task to be run on demand” Stop the task if it runs longer than: 1 hour” “If the running task does not end when requested, force it to stop” “OK” The same procedure can be used to create an event for AppLocker blocked MSI and Scripts, except you will choose Event ID: 8007. I highly recommend creating these tasks if you are going to use AppLocker A screenshot shows what the tasks will look like.