I am about to roll out a windows 7 enterprise build that includes applocker and centralised logging (splunk). my test build is producing large volumes of applogger logging as it seems to log each succesful dll launched. can anyone advise if there is a mechanism to control the applocker logging level?

Hi, Here are two guides may help you. AppLocker (Windows 7 Walkthroughs) http://technet.microsoft.com/en-us/windows/applocker.aspx AppLocker: Frequently Asked Questions Ivan-Liu TechNet Community Support