Remove/Delete AppLocker Rules with PowerShell

Question

_{Wednesday, November 21, 2018 9:14 PM}

Not sure if this is the right place for this question but I don't know where else it would go...

I recently deployed (via SCCM CI/BL) some local policy AppLocker deny rules to a bunch of devices using the AppLocker powershell commands. (Set-AppLockerPolicy and New-AppLockerPolicy) I now need to roll those specific deny rules back but there doesn't seem to be any AppLocker delete commands for this. When I added the new rules, I used the -merge switch to add to the existing default rules.

I think I could probably export the desired AppLocker rule set from a desired state device as an XML then re-import (without merge) on all the devices I want to fix which would overwrite everything and remove the unwanted AppLocker rules but this seems a little drastic and risky to wipe and reload.

Anyone have some ideas of how to programmatically remove a couple of individual AppLocker rules via PowerShell?

thanks,

Dan

All replies (3)

_{Wednesday, November 21, 2018 11:56 PM}

Kindly go through the following Microsoft article:

Delete an AppLocker rule

S.Sengupta,Microsoft MVP Windows and Devices for IT, Windows Insider MVP

_{Thursday, November 22, 2018 2:42 AM}

Hi,

To delete AppLocker rules, you can refer to S.Sengupta’s answer.

For further help, I suggest you submit a new case on PowerShell forum as they will be more professional on your issue:

This is the PowerShell forum link:

https://social.technet.microsoft.com/Forums/windows/en-US/home?forum=winserverpowershell

The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us.  Thank you for your understanding.

Hope these are helpful.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Monday, November 26, 2018 9:53 AM}

Hi,

Was your issue solved?

If yes, would you like to share your solution in order that other community members could find the helpful reply quickly.

If no, please reply and tell us the current situation in order to provide further help.

Best

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].