Embedded Lockdown Manager

    Embedded Lockdown Manager (ELM) is a tool that enables detection and configuration of lockdown features on Windows Embedded 8 Standard and Windows Embedded 8.1 Industry devices.
    • Note:There are multiple files available for this download.Once you click on the "Download" button, you will be prompted to select the files you need.


      File Name:







      Date Published:


      File Size:

      486 KB

      668 KB

      487 KB

      667 KB

      490 KB

      671 KB

      490 KB

      671 KB

      490 KB

      668 KB

      490 KB

      669 KB

        Embedded Lockdown Manager automatically detects which lockdown features are installed on the device, and displays configuration options for only those features.
        Embedded Lockdown Manager uses Windows Management Instrumentation (WMI) providers to detect and change configuration settings, and can export the settings to PowerShell scripts.

        You can use Embedded Lockdown Manager to configure the following lockdown features for Windows Embedded 8.1 Industry:
        • Windows 8 Application Launcher – Enables a single Windows Store application to start automatically. Can be configured to disable the Start screen.
        • USB Filter – Allows only trusted USB devices to connect to system.
        • Gesture Filter – Prevents undesirable edge and corner gestures.
        • Keyboard Filter - Suppresses unwanted key combinations, such as Ctrl+Alt+Delete; configure Breakout key.
        • Dialog Filter - Prevents unwanted pop-up windows and dialog boxes from appearing on the screen.
        • Unified Write Filter - Protects physical media from write operations.
        • Shell Launcher - Starts an alternate shell instead of the standard Windows shell.

        Note: In order to use the ELM Update to configure Windows 8 Application Launcher, you must first install KB2932074 on the Windows Embedded Industry 8.1 device you want to configure.
    • Supported Operating System

      Windows 7, Windows 8, Windows 8.1, Windows Embedded Industry 8.1, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2

        As an alternative to using the .MSU files below, each file has a corresponding .CAB file that can be downloaded and installed as described in the Install Instructions.

        The following files should be installed on Windows 7 or Windows Server 2008 R2:
        • Windows7-KB2932354-x64.msu
        • Windows7-KB2932354-x86.msu

        The following files should be installed on Windows Server 2012:
        • Windows8-KB2932354-x64.msu
        • Windows8-KB2932354-x86.msu

        The following files should be installed on Windows 8.1 or Windows Server 2012 R2:
        • Windows8.1-KB2932354-x64.msu
        • Windows8.1-KB2932354-x86.msu
      • A) Copy the appropriate .msu file to your system and double-click to install ELM on your system.


        B) Install the appropriate .cab file for you system via the command line with administrator privileges: "DISM /online /add-package"
      • IMPORTANT: This tool can be used to make changes directly to the registry. Make configuration changes at your own risk. Validate your changes in a test environment before deploying to a live environment or production device.

        The latest release of Embedded Lockdown Manager (ELM) enables you to install ELM on Windows 8.1 devices. This version also includes the following additional new functionality:
        • The ability to configure Windows 8 Application Launcher on Windows Embedded 8.1 Industry devices. (Requires KB2932074)
        • The ability to configure Gesture Filter on Windows Embedded 8.1 Industry devices.
        • The ability to configure USB Filter on Windows Embedded 8.1 Industry devices.


        Note: Users of Windows 7 or Windows Server 2008 R2 based computers may encounter the following error when launching ELM: “MMC has detected an error in a snap-in and will unload it”.
        MMC has known dependency on .Net Framework 3.5.1 for the above operating systems. Make sure to install .NET Framework 3.5.1 using the following steps:

        On a Windows 7-based computer
        1. Click on Start button and then click Control Panel
        2. Select Programs
        3. Under Programs and Features, select Turn Windows features on or off
        4. Select the check box next to the Microsoft .NET Framework 3.5.1.
        5. Click on OK.

        On a Windows Server 2008 R2-based computer
        1. Open Server Manager.
        2. Right click Features and select Add Features
        3. Expand .Net Framework 3.5.1 Features
        4. Select the check box next to the .NET Framework 3.5.1
        5. Click on Install.

    Popular downloads

      • 01

        DirectX End-User Runtime Web Installer

        The Microsoft DirectX® End-User Runtime provides updates to 9.0c and previous versions of DirectX — the core Windows® technology that drives high-speed multimedia and games on the PC.

      • 02

        Malicious Software Removal Tool

        This tool checks your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove the infection if it is found. Microsoft will release an updated version of this tool on the second Tuesday of each month.

      • 03

        Microsoft Security Essentials

        Microsoft Security Essentials provides real-time protection for your home or small business PC that guards against viruses, spyware, and other malicious software.

      • 04

        Windows 7 Upgrade Advisor

        Download and run the Windows 7 Upgrade Advisor to see if your PC is ready for Windows 7. It scans your hardware, devices, and installed programs for known compatibility issues, gives you guidance on how to resolve potential issues found, and recommends what to do before you upgrade.

    Loading your results, please wait...

    Free PC updates

    • Security patches
    • Software updates
    • Service packs
    • Hardware drivers

    Microsoft Suggests

    The tablet that can replace your laptop. Surface Pro 3.
    Surface Pro 3
    With a 12” display, Surface Pro 3 has the power of a laptop in a lightweight, versatile form.
    Learn more