This script allows users to execute .exe file from program files only

ransomewareimmunityproject · Jan 8, 2023 · 65b3b29 · 65b3b29
1 parent 2ea2ec1
commit 65b3b29
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/restrict_exe.ps1 b/restrict_exe.ps1
@@ -0,0 +1,11 @@
+# Import the AppLocker module
+Import-Module AppLocker
+
+# Create a new AppLocker rule to allow execution of .exe files in the ProgramFiles directory
+New-AppLockerPolicyRule -FilePathRuleType Exe -Path "C:\ProgramFiles\*" -Action Allow
+
+# Create a new AppLocker rule to block execution of .exe files in all other directories
+New-AppLockerPolicyRule -FilePathRuleType Exe -Path "*" -Action Block
+
+# Enable the AppLocker rules
+Set-AppLockerPolicy -PolicyObject (Get-AppLockerPolicy -Effective) -Enabled $true