Can't properly whitelist the Terminal package with Applocker / missing signature #8349

Open
opened 2026-01-31 01:27:12 +00:00 by claunia · 0 comments
Owner

Originally created by @CTDhelpdesk on GitHub (May 20, 2020).

Originally assigned to: @DHowett on GitHub.

Environment

Microsoft Windows NT 10.0.19041.0

Windows build number: [run `[Environment]::OSVersion` for powershell, or `ver` for cmd]
Windows Terminal version (if applicable):
1.0.1401.0

Any other software?
Applocker (not separate software, but important)

Steps to reproduce

We use Applocker to restrict both executable and packaged apps in our environments. I was able to properly whitelist the Terminal app package and it installs as expected, but when actually trying to launch it, Applocker blocks it. In event viewer, rather than showing the package name, it shows a blank. The error verbatim is " was prevented from running. "

Full event viewer output:

Provider [ Name] Microsoft-Windows-AppLocker [ Guid] {cbda4dbf-8d5d-4f69-9578-be14aa540d22} Provider       [ Name] Microsoft-Windows-AppLocker       [ Guid] {cbda4dbf-8d5d-4f69-9578-be14aa540d22}
Provider
      [ Name] Microsoft-Windows-AppLocker
      [ Guid] {cbda4dbf-8d5d-4f69-9578-be14aa540d22}

Expected behavior

Expected Applocker behavior is to properly allow the app to run, since the package Microsoft.WindowsTerminal is whitelisted.

Actual behavior

Screenshot of the (blank) package name being blocked by Applocker:
image

Originally created by @CTDhelpdesk on GitHub (May 20, 2020). Originally assigned to: @DHowett on GitHub. <!-- 🚨🚨🚨🚨🚨🚨🚨🚨🚨🚨 I ACKNOWLEDGE THE FOLLOWING BEFORE PROCEEDING: 1. If I delete this entire template and go my own path, the core team may close my issue without further explanation or engagement. 2. If I list multiple bugs/concerns in this one issue, the core team may close my issue without further explanation or engagement. 3. If I write an issue that has many duplicates, the core team may close my issue without further explanation or engagement (and without necessarily spending time to find the exact duplicate ID number). 4. If I leave the title incomplete when filing the issue, the core team may close my issue without further explanation or engagement. 5. If I file something completely blank in the body, the core team may close my issue without further explanation or engagement. All good? Then proceed! --> <!-- This bug tracker is monitored by Windows Terminal development team and other technical folks. **Important: When reporting BSODs or security issues, DO NOT attach memory dumps, logs, or traces to Github issues**. Instead, send dumps/traces to secure@microsoft.com, referencing this GitHub issue. If this is an application crash, please also provide a Feedback Hub submission link so we can find your diagnostic data on the backend. Use the category "Apps > Windows Terminal (Preview)" and choose "Share My Feedback" after submission to get the link. Please use this form and describe your issue, concisely but precisely, with as much detail as possible. --> # Environment Microsoft Windows NT 10.0.19041.0 ```none Windows build number: [run `[Environment]::OSVersion` for powershell, or `ver` for cmd] Windows Terminal version (if applicable): 1.0.1401.0 Any other software? Applocker (not separate software, but important) ``` # Steps to reproduce We use Applocker to restrict both executable and packaged apps in our environments. I was able to properly whitelist the Terminal app package and it installs as expected, but when actually trying to launch it, Applocker blocks it. In event viewer, rather than showing the package name, it shows a blank. The error verbatim is " was prevented from running. " Full event viewer output: Provider [ Name] Microsoft-Windows-AppLocker [ Guid] {cbda4dbf-8d5d-4f69-9578-be14aa540d22} | Provider |   |   |   | [ Name] | Microsoft-Windows-AppLocker |   |   |   | [ Guid] | {cbda4dbf-8d5d-4f69-9578-be14aa540d22} -- | -- | -- | -- | -- | -- | -- | -- | -- | -- | -- | -- Provider   |   |   | [ Name] | Microsoft-Windows-AppLocker   |   |   | [ Guid] | {cbda4dbf-8d5d-4f69-9578-be14aa540d22} # Expected behavior Expected Applocker behavior is to properly allow the app to run, since the package Microsoft.WindowsTerminal is whitelisted. # Actual behavior Screenshot of the (blank) package name being blocked by Applocker: ![image](https://user-images.githubusercontent.com/65674594/82474919-997fc380-9a80-11ea-881d-68ce63a857df.png)
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/terminal#8349