Add to the list of Windows defenses that don't seem to do anything: Starting with Windows 11 22H2, Software Restriction Policies (SRP) no longer seem to do anything. Hopefully nobody is relying on this capability!
2 problems: 1) NTFS-level no-exec perms catch EXE and friends. But not other things like JS, HTA... 2) Path-based Software Restriction Policies work way better for blocking things that run. The kicker: Starting with Win11 22H2, newly-created policies don't work. Bugs everywhere!
Clear the applocker policy? learn.microsoft.com/en-us/wi…
Delete an AppLocker rule (Windows)
This article for IT professionals describes the steps to delete an AppLocker rule.learn.microsoft.com
Nov 8, 2022 · 6:24 AM UTC