Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1005183" data-attributes="member: 32260">From another thread:There are a few ways to create WDAC policies:<ol>
<li data-xf-list-type="ol">Using the example policies (XML) from the folder: 
%Windir%\schemas\CodeIntegrity\ExamplePolicies 
The XML policy examples can be edited manually if one knows what to do.</li>
<li data-xf-list-type="ol">Using PowerShell to change the example policy from point 1 and create a binary policy file.</li>
<li data-xf-list-type="ol">Using tools like WDAC Wizard: 
[URL unfurl=&quot;true&quot;]https://webapp-wdac-wizard.azurewebsites.net/[/URL] 
[URL unfurl=&quot;true&quot;]https://github.com/MicrosoftDocs/WDAC-Toolkit[/URL]</li>
</ol>One can create a single base policy, multiple base policy, or supplemental policies.When deploying a single base policy it can work in the directory:%Windir%\System32\CodeIntegrity\The binary policy has to be renamed to SIPolicy.p7bThe binary policy can be deployed via GPO. In this case, the file extension is usually .bin or .cip (probably any file name and extension will work too). The location of the binary policy file can be chosen by the user.When deploying multiple policies or supplemental policies, they are located in the directory:%Windir%\System32\CodeIntegrity\CiPolicies\Active\One can use this location also for a single base policy.The name of the binary policy file must be in the form of a proper GUID with the extension .cipA few useful resources:[URL unfurl=&quot;false&quot;]https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/deploying-windows-10-application-control-policy/ba-p/2486267[/URL][URL unfurl=&quot;false&quot;]https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/[/URL][URL unfurl=&quot;false&quot;]https://mattifestation.medium.com/windows-defender-application-control-wdac-resources-9cad7026a943[/URL]</blockquote>

[QUOTE="Andy Ful, post: 1005183, member: 32260"] From another thread: There are a few ways to create WDAC policies: [LIST=1] [*]Using the example policies (XML) from the folder: [B]%Windir%\schemas\CodeIntegrity\ExamplePolicies[/B] The XML policy examples can be edited manually if one knows what to do. [*]Using PowerShell to change the example policy from point 1 and create a binary policy file. [*]Using tools like WDAC Wizard: [URL unfurl="true"]https://webapp-wdac-wizard.azurewebsites.net/[/URL] [URL unfurl="true"]https://github.com/MicrosoftDocs/WDAC-Toolkit[/URL] [/LIST] One can create a single base policy, multiple base policy, or supplemental policies. When deploying a single base policy it can work in the directory: %Windir%\System32\CodeIntegrity\ The binary policy has to be renamed to SIPolicy.p7b The binary policy can be deployed via GPO. In this case, the file extension is usually .bin or .cip (probably any file name and extension will work too). The location of the binary policy file can be chosen by the user. When deploying multiple policies or supplemental policies, they are located in the directory: %Windir%\System32\CodeIntegrity\CiPolicies\Active\ One can use this location also for a single base policy. The name of the binary policy file must be in the form of a proper GUID with the extension .cip A few useful resources: [URL unfurl="false"]https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/deploying-windows-10-application-control-policy/ba-p/2486267[/URL] [URL unfurl="false"]https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/[/URL] [URL unfurl="false"]https://mattifestation.medium.com/windows-defender-application-control-wdac-resources-9cad7026a943[/URL] [/QUOTE]

Verification