Cannot get allow for dlls in AppData to work.

Oliver, Timothy 0 Reputation points
2026-08-11T19:08:39.8666667+00:00

To start, I have a large group of devices which I need to lock down from running anything other that specifically installed or allowed software. That part went swimmingly. A quick WDAC policy and nothing unwanted works.

Problem is that there are a few programs that I do need to work and I cannot get them to run properly. Problem is with unsigned files being added in AppData. I have tried every permutation of FilePath rule that I can find or think of:

%OSDRIVE%\Users\TestUser\Local\Temp\test01.dll

C:\Users\TestUser\Local\Temp\test01.dll

%OSDRIVE%\Users*\Local\Temp\test01.dll

C:\Users*\Local\Temp\test01.dll

%APPDATA%\Local\Temp\test01.dll

%LOCALAPPDATA%\Local\Temp\test01.dll

*\test01.dll

*test01.dll

Not a single one of these is allowing the application to work with these dlls. They are being added to the AppData\Local\Temp folder but that is where the function ceases. I get error 3033 immediately followed by error 3077 in the code integrity section of Event Viewer every time I run this applications .exe.

For the record, I cannot redirect these files in any way. Its just the way the software designer made it.

Edit01: I should add that the pair of Publisher rules in the policy are working as intended. Both .exe files were inoperable before adding them. So its not a problem with the policy not being executed.

Microsoft Security | Intune | Application management
0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.