none
APP Locker Deployment via GPO causes Start Menu to not function

    Question

  • We have Windows 10 Enterprise build 1607 in a single forest/domain architecture.  We have successfully deployed a GPO to enabled the application identity service without issue.  We create the GPO for App Locker and import from a target computer to create "Packaged app rules".  When we enforce a rule (even with only 1 deny - candy crush) the start menu becomes unresponsive.  

    To make this even odder "sometimes" we can create a new user profile and have the deny rule work with the start menu working, but the original user will still be broken.  After 2-4 hours the previously working profile will then have the same "broken" start menu.

    The make the Windows 10 computer responsive we have to remove the app locker package enforcement.  However, we have had issues with the client has had the application identity service disabled and the start menu still does not work. 

    Tuesday, August 23, 2016 10:26 PM

Answers