{"action":"created","issue":{"url":"https://api.github.com/repos/MicrosoftDocs/windows-itpro-docs/issues/381","repository_url":"https://api.github.com/repos/MicrosoftDocs/windows-itpro-docs","labels_url":"https://api.github.com/repos/MicrosoftDocs/windows-itpro-docs/issues/381/labels{/name}","comments_url":"https://api.github.com/repos/MicrosoftDocs/windows-itpro-docs/issues/381/comments","events_url":"https://api.github.com/repos/MicrosoftDocs/windows-itpro-docs/issues/381/events","html_url":"https://github.com/MicrosoftDocs/windows-itpro-docs/issues/381","id":282499183,"number":381,"title":"Requirements to use AppLocker: workgroup environment","user":{"login":"Crypt32","id":6384119,"avatar_url":"https://avatars1.githubusercontent.com/u/6384119?v=4","gravatar_id":"","url":"https://api.github.com/users/Crypt32","html_url":"https://github.com/Crypt32","followers_url":"https://api.github.com/users/Crypt32/followers","following_url":"https://api.github.com/users/Crypt32/following{/other_user}","gists_url":"https://api.github.com/users/Crypt32/gists{/gist_id}","starred_url":"https://api.github.com/users/Crypt32/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Crypt32/subscriptions","organizations_url":"https://api.github.com/users/Crypt32/orgs","repos_url":"https://api.github.com/users/Crypt32/repos","events_url":"https://api.github.com/users/Crypt32/events{/privacy}","received_events_url":"https://api.github.com/users/Crypt32/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2017-12-15T17:41:23Z","updated_at":"2018-04-02T23:49:12Z","closed_at":"2018-04-02T23:49:12Z","author_association":"NONE","body":"Based on this issue: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/360\r\n\r\nOriginal quote:\r\n> They indicated AppLocker can be enforced on workgroup machines\r\n\r\nunfortunately, it is incorrect statement, or additional information is missing. Reference: https://docs.microsoft.com/en-us/windows/device-security/applocker/configure-the-application-identity-service\r\n\r\n> Starting with Windows 10, the Application Identity service is now a protected process. Because of this, you can no longer manually set the service Startup type to Automatic. \r\n\r\nApplocker relies on Application Identity service and you can't change its start type via services.msc on a standalone machine. If you start the service, Applocker rules won't apply until the server reboots. Since service start type is Manual (by default) and cannot be changed via services.msc, after reboot the service is stopped. The configuration process described in the referenced doc is applicable for domain members only. GPMC is not available in workgroup environments. I made several tests on Windows Server 2016 and all failed to apply Applocker rules. Therefore, I concluded that it is not possible and should be mentioned in requirements unless there will be a note on how to enable Applocker in workgroup environments.\r\n\r\nEither, update article on applocker requirements or provide information about Applocker configuration in workgroup envrionments, where GPMC is not available."},"comment":{"url":"https://api.github.com/repos/MicrosoftDocs/windows-itpro-docs/issues/comments/378083426","html_url":"https://github.com/MicrosoftDocs/windows-itpro-docs/issues/381#issuecomment-378083426","issue_url":"https://api.github.com/repos/MicrosoftDocs/windows-itpro-docs/issues/381","id":378083426,"user":{"login":"Justinha","id":1656813,"avatar_url":"https://avatars2.githubusercontent.com/u/1656813?v=4","gravatar_id":"","url":"https://api.github.com/users/Justinha","html_url":"https://github.com/Justinha","followers_url":"https://api.github.com/users/Justinha/followers","following_url":"https://api.github.com/users/Justinha/following{/other_user}","gists_url":"https://api.github.com/users/Justinha/gists{/gist_id}","starred_url":"https://api.github.com/users/Justinha/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Justinha/subscriptions","organizations_url":"https://api.github.com/users/Justinha/orgs","repos_url":"https://api.github.com/users/Justinha/repos","events_url":"https://api.github.com/users/Justinha/events{/privacy}","received_events_url":"https://api.github.com/users/Justinha/received_events","type":"User","site_admin":false},"created_at":"2018-04-02T23:49:12Z","updated_at":"2018-04-02T23:49:12Z","author_association":"CONTRIBUTOR","body":"@Crypt32 added here: https://docs.microsoft.com/en-us/windows/security/threat-protection/applocker/configure-the-application-identity-service "}}
{"actor":{"display_login":"Justinha"}}