You can use AppLocker to edit rules that you have created.
Editing a publisher rule
The following procedure describes how to edit a publisher rule.
Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure.
![]() |
To edit a publisher rule |
-
Click Start, type secpol.msc in the Search programs and files box, and then press ENTER. You can also:
- Click Start, and then click Control Panel.
- Click System and Security, and then click
Administrative Tools.
- Double-click Local Security Policy.
- Click Start, and then click Control Panel.
-
If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Yes.
-
In the console tree, double-click Application Control Policies, and then double-click AppLocker.
-
Click the appropriate rule collection.
-
In the Action pane, right-click the publisher rule, and then click Properties.
-
Click the appropriate tab to edit the rule properties.
- Click the General tab to change the
rule name, add a rule description, configure whether the rule is
used to allow or deny applications, and set the security group for
which this rule should apply.
- Click the Publisher tab to configure
the certificate's common name, the product name, the file name, or
file version of the publisher.
- Click the Exceptions tab to create or
edit exceptions.
- When you finish updating the rule, click
OK.
- Click the General tab to change the
rule name, add a rule description, configure whether the rule is
used to allow or deny applications, and set the security group for
which this rule should apply.
Editing a file hash rule
The following procedure describes how to edit a hash rule.
Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure.
![]() |
To edit a file hash rule |
-
Click Start, type secpol.msc in the Search programs and files box, and then press ENTER. You can also:
- Click Start, and then click Control Panel.
- Click System and Security, and then click
Administrative Tools.
- Double-click Local Security Policy.
- Click Start, and then click Control Panel.
-
If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Yes.
-
In the console tree, double-click Application Control Policies, and then double-click AppLocker.
-
Choose the appropriate rule collection.
-
In the Action pane, right-click the file hash rule, and then click Properties.
-
Click the appropriate tab to edit the rule properties.
- Click the General tab to change the
rule name, add a rule description, configure whether the rule is
used to allow or deny applications, and set the security group in
which this rule should apply.
- Click the File Hash tab to configure
the files that should be used to enforce the rule. You can use the
Browse Files button to add a specific file or the Browse
Folders button to add all files in a specified folder.
- When you finish updating the rule, click
OK.
- Click the General tab to change the
rule name, add a rule description, configure whether the rule is
used to allow or deny applications, and set the security group in
which this rule should apply.
Editing a path rule
The following procedure describes how to edit a path rule.
Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure.
![]() |
To edit a path rule |
-
Click Start, type secpol.msc in the Search programs and files box, and then press ENTER. You can also:
- Click Start, and then click Control Panel.
- Click System and Security, and then click
Administrative Tools.
- Double-click Local Security Policy.
- Click Start, and then click Control Panel.
-
If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Yes.
-
In the console tree, double-click Application Control Policies, and then double-click AppLocker.
-
Choose the appropriate rule collection.
-
In the Action pane, right-click the path rule, and then click Properties.
-
Click the appropriate tab to edit the rule properties.
- Click the General tab to change the
rule name, add a rule description, configure whether the rule is
used to allow or deny applications, and set the security group in
which this rule should apply.
- Click the Path tab to configure the
path on the computer in which the rule should be enforced.
- Click the Exceptions tab to create
exceptions for specific files in a folder.
- When you finish updating the rule, click
OK.
- Click the General tab to change the
rule name, add a rule description, configure whether the rule is
used to allow or deny applications, and set the security group in
which this rule should apply.
Additional references