Search This Blog

Thursday, September 15, 2016

FIXED: Windows 10 Start button does not work after applying Applocker policies

Applocker is a realy good feature (available only in Windows Enterprise editions), but as all security features it has some gotchas.
One of them is that if you enable Applocker on Windows 10 the Start button doesn't work anymore. If you left-click it then nothing happens. You can right-click it but that's obviously not enough.

In addition to this there are following errors logged in Applocker log in Event Viewer (Applications and Services - Microsoft - Windows - Applocker)

"No packaged apps can be executed while Exe rules are being enforced and no Packaged app rules have been configured."

To solve this you need to create a Packaged App rules in Applocker group policy. To do this follow these steps:
1. Go to Computer Configuration / Policies / Windows Settings / Security Settings / Application Control Policies / Applocker 
2. Right-Click Packaged App Rules and select Create Default Rules
3. After the policy is applied to Windows 10 workstation, Start button will work again.

P.S. If you have a Windows 2008 R2 domain controller, then you will not see "Packaged app Rules" in Group Policy Management Console. You will need to create this policy from Windows Server 2012 server with GPMC.


  1. Thank you so much!! I had been looking into this issue for weeks and now its resolved.. God bless you!

  2. Nice one, IT works, thanks!

    BTW fresh 2016 standard server installation broken this way from start.

  3. Doesnt work for win2016 - another solution ??

  4. Yes! Thank You!!!
    I had to also generate the default rules for: "Executable Rules", "Windows Installer Rules" and "Script Rules" as well.

    This fixed my start menu for my win 10 Enterprise machine after the 1803 update.

  5. This was so helpful. The Microsoft articles on this issue were no help, this solved my missing start menu issue in seconds. Thanks for solving and posting this.

    I had generated default Executable Rules to help me block IE from users running it, but I had not generated default Packaged App rules or the other things. I will do those now.

  6. This method worked for me as well! Thank you!