Edit AppLocker rules

This article for IT professionals describes the steps to edit a publisher rule, path rule, and file hash rule in AppLocker.

For more info about these rule types, see Understanding AppLocker rule condition types.

To manage an AppLocker policy in a Group Policy Object (GPO), you can perform this task by using the Group Policy Management Console. To manage an AppLocker policy for the local computer or for use in a security template, use the Local Security Policy snap-in. For info how to use these MMC snap-ins to administer AppLocker, see Administer AppLocker.

To edit a publisher rule

1. Open the AppLocker console, and then select the appropriate rule collection.

2. In the Action pane, right-click the publisher rule, and then select Properties.

3. Select the appropriate tab to edit the rule properties.

   • Select the General tab to change the rule name, add a rule description, configure whether the rule is used to allow or deny applications, and set the security group for which this rule should apply.
   • Select the Publisher tab to configure the certificate's common name, the product name, the file name, or file version of the publisher.
   • Select the Exceptions tab to create or edit exceptions.
   • When you finish updating the rule, select OK.

To edit a file hash rule

1. Open the AppLocker console, and then select the appropriate rule collection.

2. Choose the appropriate rule collection.

3. In the Action pane, right-click the file hash rule, and then select Properties.

4. Select the appropriate tab to edit the rule properties.

   • Select the General tab to change the rule name, add a rule description, configure whether the rule is used to allow or deny applications, and set the security group in which this rule should apply.
   • Select the File Hash tab to configure the files that should be used to enforce the rule. You can select Browse Files to add a specific file or select Browse Folders to add all files in a specified folder. To remove hashes individually, select Remove.
   • When you finish updating the rule, select OK.

To edit a path rule

1. Open the AppLocker console, and then select the appropriate rule collection.

2. Choose the appropriate rule collection.

3. In the Action pane, right-click the path rule, and then select Properties.

4. Select the appropriate tab to edit the rule properties.

   • Select the General tab to change the rule name, add a rule description, configure whether the rule is used to allow or deny applications, and set the security group in which this rule should apply.
   • Select the Path tab to configure the path on the computer in which the rule should be enforced.
   • Select the Exceptions tab to create exceptions for specific files in a folder.
   • When you finish updating the rule, select OK.