Rule exceptions allow you to specify files or folders to exclude from the rule.
Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure.
![]() |
To configure exceptions for a rule |
-
Click Start, type secpol.msc in the Search programs and files box, and then press ENTER. You can also:
- Click Start, and then click Control Panel.
- Click System and Security, and then click
Administrative Tools.
- Double-click Local Security Policy.
- Click Start, and then click Control Panel.
-
Expand Application Control Policies, and then expand AppLocker.
-
Expand the rule collection, right-click the rule that you want to configure exceptions for, and then click Properties.
-
Click the Exceptions tab.
-
In the Add exception box, select the rule type that you want to create, and then click Add.
- For a publisher exception, click
Browse, select the file that contains the publisher to
exclude, and then click OK.
- For a path exception, choose the file or
folder path to exclude, and then click OK.
- For a file hash exception, choose the file or
folder path to exclude, and then click OK.
- For a publisher exception, click
Browse, select the file that contains the publisher to
exclude, and then click OK.
Additional references