AppLocker with server 2012 R2 & windows 10 1511 (CBB) April 2016

[WAZZIE]

Hi dudes and dudettes

 

Just a quickie really -

OK so I have Windows 10 being deployed by sccm 1602 all works fine. The image is the original Enterprise 1511 Apr16 update not touched in any way

 

I want to play with APPLOCKER in my lab, however have not quite got it working correctly.

after bit of reading and googling and testing in my lab, it looks very easy but I seem to missing something here and hope an extra pair of eyes may help me.!!

 

I am only applying a few rules, these are enforced APPx / UWA rules, and I have started the AppID service.

These rules were generated in AD GPO from a newly built device built straight from the MS ISO. (and domained)

 

The applications get blocked but do not display the usual blocked message, they just hang with the progress bar underneath, like they are attempting to update.

This surely isn't how it should be - I was expecting the YOUR ADMINISTRATOR HAS BLOCKED THIS APPLICATION MESSAGE which I have seen when logged in as the administrator.

 

I have also tried to target a specific group with two normal domain users in to get these rules applied, but to no avail, at least not how I read it as working.

 

From what I can see the only place to set rules is the computer part of the GPO, is there anything else to do on the user settings?

 

Thanks for reading, any help or pointers appreciated

Regards

WAZZIE