Solved

Create AppLocker rule in GPO for a local user account

Posted on 2015-01-30
3
557 Views
Last Modified: 2015-02-06
I would like to create an applocker rule in a GPO that applies to a local user that has been created on a group of machines.  When I assign an applocker rule, it doesn't let me enter a user, but forces me to select a domain user or a local user that exists on the machine I am using to edit the GPO.

I tried just creating the user on my machine I am using to edit the GPO, but it seems to tie the rule to the SID for that account on that computer which certainly wouldn't be the same SID on all of the other computers.  They would have different SID's for the local account.

How can I apply an applocker rule to a local user in a GPO?
0
Comment
Question by:gacus
3 Comments
 
LVL 34

Expert Comment

by:Seth Simmons
ID: 40580645
you can't create a GPO for a local account
GPO is applied to an OU which implies domain accounts
0
 
LVL 1

Author Comment

by:gacus
ID: 40580660
That is not true.  GPO apply to either to computers or users(domain accounts).  In this case the Applocker policy applies to the computer machine policy.  Within the Applocker policy rules you can select the users that this applies to.  You can clearly select "Everyone" which includes local users and the (LOCAL) BUILTIN\Administrator.  I just want to specify a different local account.

All of my computers that I am referring to are joined to the domain and I am applying the policy to the machine.
0
 
LVL 36

Accepted Solution

by:
Mahesh earned 500 total points
ID: 40582766
You can't apply to Applocker rule to single local user account from domain based GPO

Your rule will be applied to all local users including administrator on specific group of machines (when you apply rule to everyone) and to domain users who will logon to those machines

Even if you use conventional software restriction policies, it will behave in same way
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Synchronize a new Active Directory domain with an existing Office 365 tenant
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question