KB5024351—Removal of Windows edition checks for AppLocker

Applies To
Windows 11 version 22H2, all editions Windows 11 version 21H2, all editions Windows 10 Enterprise Multi-Session, version 20H2 Windows 10 Enterprise and Education, version 20H2 Windows 10 IoT Enterprise, version 20H2 Windows 10 on Surface Hub Windows 10, version 21H1, all editions Windows 10, version 21H2, all editions

Summary

The Windows updates dated September 30, 2022, and later, made significant changes for AppLocker support. Before the updates, Windows tied policy enforcement to the Windows edition and the method used to manage its endpoints. For instance, systems managed by mobile device management (MDM) enforced AppLocker policies on all editions of Windows 10 and Windows 11. Also, systems managed by Group Policy only enforced AppLocker policies on Windows 10 and Windows 11 Enterprise or Education editions.

These updates removed the edition checks for Windows 10, versions 2004, 20H2, and 21H1 and all versions of Windows 11. You can now deploy and enforce AppLocker policies to all of these Windows versions regardless of their edition or management method.

Compatibility

Because of this change, Windows Defender Application Control (WDAC) IT pros can deploy Managed Installer policies to managed systems without the constraint of Windows editions. AppLocker IT pros can now also manage a greater number of systems using AppLocker by targeting editions not previously supported by AppLocker.

Product KB number Release date
Windows 11, version 22H2 5017389 September 30, 2022
Windows 11, version 21H2 5018483 October 25, 2022
Windows 10, version 2004
Windows 10, version 20H2
Windows 10, version 21H1
5018482 October 25, 2022