This AppLocker rules blocks everyone from using Mozilla Firefox. This setting is configured by using an XML blob that is store in the registry setting for this setting. You can obtain the XML blob by configuring the desired setting in the Local Group Policy console and then retrieving the blob from the registry setting. Vulnerability: A malicious agent could run malware by using Mozilla Firefox. Counter Measure: Disable the use of Mozilla Firefox on domain controllers for everyone. Potential Impact: Depending on configuration, users will be unable to use Mozilla Firefox. Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\Application Control Policies\AppLocker\Executable Rules\AppLocker: Executable Rules: Block Mozilla Firefox (Deny Everyone) (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\SrpV2\Exe\6db6c8f3-cf7c-4754-a438-94c95345bb53!Value