if you messed up your AppLocker and your computer becomes unusuable

Here’s how to undo Intune AppLocker CSPs.

Step 1: Go to Microsoft Intune. Find the device configuration profile that has the OMA-URI where the AppLocker CSP for EXE file with the XML policy is stored. Remove the affected users and groups.

Step 2: Turn off the computer. Power it one and get into Windows safe mode. Start the computer in safe mode with networking.

Step 3: Log into safe mode with an administrator account. Start removing the AppLocker CSP policies by going to C:\Windows\System32\AppLocker\ and delete all the .Policy files and the AppCache.dat file. Then go to the MDM subfolder. Keep going down into the folders until you find the XML file that has the AppLocker CSP that’s causing you grief. Go to C:\Program Files (x86)\Microsoft Intune Management Extension\ and double click the AgentExecutor.exe file.

Step 4: Reboot the computer. Log into the account with the administrator account. You should be able to log in without seeing the black screen. This assumes that your AppLocker CSP state was good before you added that XML policy that was causing you grief.

Step 5: Log out of the administrator account and log in with the regular user account. You should be able to log in without seeing the black screen.

 

By admin