Who can install and run files?
Administrators can use AppLocker to control what files are allowed to run on individual computers. A user who is not a member of the Administrators group will not be able to run a file if the AppLocker policy explicitly denies the file from running or does not include the file as part of the allowed files. If the file requires administrative credentials to install or run, users who cannot provide administrative credentials will be prevented from running the file even if the file is explicitly allowed by an AppLocker policy. Even with AppLocker policies enforced, only members of the Administrators group can install or run files that require administrative credentials.
