ThreatLocker Supported OS Builds

Minimum System Requirements 

Windows

Upcoming ThreatLocker Version 11.0

The upcoming ThreatLocker version 11 uses .NET version 8. Consequently, the supported Operating Systems for ThreatLocker version 11 and above will be as listed below.

Supported Windows Workstation Builds 

• Windows 11 - 11 24H2 (IoT), 11 24H2 (E), 11 24H2, 11 23H2, 11 22H2 (E)
• Windows 10 – 10 22H2, 10 21H2 (E), 10 21H2 (IoT), 10 1809 (E), 10 1607 (E)

Supported Windows Server Builds  

• Windows Server 2025
• Windows Server 23H2
• Windows Server 2022 
• Windows Server 2019 
• Windows Server 2016 
• Windows Server 2012 R2
• Windows Server 2012

Supported Windows on ARM Builds

• Windows 11 – Version 22H2 or above

For the best experience, Windows on ARM requires Windows 11 version 22H2 or above. Older versions of Windows on ARM may work; however, users may experience unintended denies for core files.

ThreatLocker Versions Below 11.0

We will continue to support these versions by addressing major bugs and security-impacting issues, but new features will only be available in ThreatLocker version 11 and later.

Supported Hardware 

• CPU: Two cores are required. Expected normal usage is less than 1%, with occasional small spikes. Baselining will use up to a full core 
• .NET 4.5.1  
• 1Gb+ of hard drive space
• RAM: 2GB. Expected normal usage is 200-600MB  
• See below for the complete list of supported Operating Systems 

Supported Windows Workstation Builds 

• Windows 11 - All Versions 
• Windows 10 – All Versions 
• Windows 8.1 - All Version
• Windows 8 – All Versions *
• Windows 7 – Fully Patched *

Supported Windows Server Builds  

• Windows Server 2022 
• Windows Server 2019 
• Windows Server 2016 
• Windows Server 2012 R2 
• Windows Server 2012 *
• Windows Server 2008 R2 – Fully Patched *
• Windows Server 2008 – Fully Patched *

Supported Windows on ARM Builds

• Windows 11 – Version 22H2 or above

For the best experience, Windows on ARM requires Windows 11 version 22H2 or above. Older versions of Windows on ARM may work; however, users may experience unintended denies for core files

* The following Windows builds do not come pre-installed with .NET 4.5.1 and will require installation for the ThreatLocker service to start

Windows XP

Supported Hardware

• CPU: Two cores are required. Baselining will use up to a full core.

• 1Gb+ of hard drive space

• RAM: 512 MB minimum

• .NET Framework: 4.0.3

Supported OS Builds

• Microsoft Windows XP Embedded Service Pack 3 (5.1.2600)
• Microsoft Windows XP Embedded Service Pack 3 FP2007 (5.1.2600)
• Microsoft Windows XP Embedded Service Pack 3 SP3 (5.1.2600)
• Microsoft Windows XP Home Edition Service Pack 3 (5.1.2600)
• Microsoft Windows XP Professional Service Pack 3 (5.1.2600)
• Microsoft Windows XP Professional x64 Edition Service Pack 2 (5.2.3790)

Note: Since Windows XP does not support TLS 1.2+, traffic from the ThreatLocker agent must be routed through a proxy or relay service that supports TLS 1.2 or greater. If you have any questions on how to accomplish this, please reach out to our Cyber Heroes.

Deploying ThreatLocker to Windows XP | ThreatLocker Help Center (kb.help)

macOS

Supported Hardware 

• 1GB+ of hard drive space
• Intel CPU 
• Apple Silicon 

Resource utilization varies depending on the device model and use case. Extensive file operations can spike CPU usage. If you are concerned, please reach out to our Cyber Hero Support team.

Supported macOS Workstation Builds

• macOS 12.6.2 and above are fully supported

Note: ThreatLocker may work on older versions than 12.6.2, but we are unable to test at this time.

ThreatLocker supports macOS beta builds to the best of our abilities.

Please note: due to the complexity and variables of different mac versions and the files created when updating, beta upgrades must be followed in sequential order to be functionable i.e ( beta #1 to beta #2 to beta #3 ect.). In this example, if beta #2 is skipped, blocks may occur.

Linux

Supported Hardware 

• 1GB+ of hard drive space 
• 2GB of RAM 
• CPU: At least two cores are required (>1 GHz) 

It is recommended that you follow the standard hardware required to run your Linux distribution. Resource utilization can vary depending on your distribution and device. Extensive file operations can spike CPU usage. If you are concerned, please reach out to our Cyber Hero Support team. 

Officially Supported Versions:

Notes

Patches for Windows 7 and Server 2008:  

These specific patches are required to operate, as a minimum, and we recommend fully patched versions for best performance:

• KB4490628 for Windows Server 2008 R2 SP1  and Windows 7 SP1  
• KB4474419 for Windows Server 2008 R2, Windows 7, and Windows Server 2008
• KB2858728 for Windows Vista SP2, Windows 7 SP1, Windows 8, Windows Server 2008 SP2, Windows Server 2008 R2 SP1, and Windows Server 2012
• KB3033929 for Windows 7

Insider Builds

Please note that the Application Team does its best to capture the Windows Insider Builds for our client's convenience, but we can’t guarantee that we will catch each update. This is due to two main factors: the frequency of updates and the fact that updates may be deployed under varying circumstances. Thus, Insider Builds are not considered fully supported by ThreatLocker.  

ARM Processors

We recommend using Windows 11 version 22H2 or above. Older versions of Windows 11 may work, but they could experience unintended denies for core files.