While I don’t have a direct answer for your question, this may help: when an application is allowed/denied, the event logs list what specific AppLocker rule either allowed/denied the executable. You can reference this to isolate the rule that is allowing Skype to run.
The Event log is located at Applications and Services Log | Microsoft | Windows | AppLocker. Find the appropriate entry listing Skype running and then click on the Details tab. Look for the entry RuleSddl – the end of this entry will list the use referenced to allow Skype to run. -Aakash Shah From: [email protected] [mailto:[email protected]] On Behalf Of Rickym61 Sent: Monday, December 8, 2014 1:19 PM To: [email protected] Subject: [mssms] OT: Applocker GPO & Windows 8.1 hi all, a bit OT ok a lot OT, but as so many of you wear more than a System Centre hat throwing it out there. Unable to block Onedrive & Skype via Applocker GPO. In the link below it blocks mail, people, calendar (as we use Office 2013) but selecting the Sky(One)drive & or Skype has no effect despite setting the package app rule for each app to Deny. ADMX files are latest version. Followed various blogs, technet articles but still struggling. Used this as my baseline, works very well http://www.grouppolicy.biz/2012/08/how-manage-published-a-k-a-metro-apps-in-windows-8-using-group-policy/ Anyone blocking Skype/Onedrive? TIA. Ricky.
