Bulk allowlist frequently updating Windows apps in Hexnode using AppLocker Publisher rulesSolved

Hi @annemie,

For Windows devices, App Groups are useful when you want to allowlist a fixed set of apps already available in the app inventory or store apps. However, for applications that update frequently and appear as new entries, AppLocker rules are usually the better option.

You can configure an allowlist rule based on the app publisher instead of selecting each app version individually:

1. Go to Policies and create or edit a Windows policy.
2. Navigate to Windows > App Management > Blocklist/Allowlist.
3. Click Configure and select Add Rules section.
4. Click on + Add Rules and Choose the relevant app type, such as Executables (.exe) or Packaged Apps.
5. Set the rule condition to Publisher Name.
6. Enter the publisher name of the application.
7. Use an asterisk (*) in the App Name field to allow all apps or versions from that publisher.
8. Save the policy and associate it with the required Windows devices.

This allows updated versions from the same publisher without needing to add each version separately. If the applications are installed from a trusted common folder, a File Path rule can also be used to allow apps from that directory, but publisher-based rules are usually safer for frequently updated signed applications.

Best regards,
Eden Pierce
Hexnode UEM

That makes sense. Tried the publisher wildcard approach for one of our frequently updated Windows apps and it worked better than maintaining the list manually. Much easier than adding every new version to the allowlist. Appreciate it, working fine now.