Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 828836" data-attributes="member: 32260">I thought that the main issue of the setup based on WD Application Guard + &quot;Trust apps with good reputation&quot; feature, would be the lack of whitelisting in the UserSpace.But, it seems that after a few-days of bypassing this protection via forced SmartScreen (see point 6. above), Windows Defender learns (locally) that application is safe, and it can be run normally without blocking by Application Guard. This is usually limited to a particular computer until the application will gain sufficient reputation to be accepted as safe in the cloud.Edit.Applying the above WD Application Guard policies on Windows Home ver. 1903 is very simple. The predefined file SIPolicy.p7b has to be copied with admin rights into the folder C:\Windows\System32\CodeIntegrity, and the computer must be rebooted.If the user wants to unload the policies, then the file SIPolicy.p7b can be simply renamed or removed and the computer rebooted. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite135" alt=":giggle:" title="Giggle&nbsp; &nbsp; :giggle:" loading="lazy" data-shortname=":giggle:" /> <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" /></blockquote>

[QUOTE="Andy Ful, post: 828836, member: 32260"] I thought that the main issue of the setup based on WD Application Guard + "Trust apps with good reputation" feature, would be the lack of whitelisting in the UserSpace. But, it seems that after a few-days of bypassing this protection via forced SmartScreen (see point 6. above), [B]Windows Defender learns (locally) that application is safe[/B], and it can be run normally without blocking by Application Guard. This is usually limited to a particular computer until the application will gain sufficient reputation to be accepted as safe in the cloud. Edit. Applying the above WD Application Guard policies on [B]Windows Home ver. 1903[/B] is very simple. The predefined file [COLOR=rgb(0, 168, 133)][B]SIPolicy.p7b[/B][/COLOR] has to be copied with admin rights into the folder [COLOR=rgb(0, 168, 133)][B]C:\Windows\System32\CodeIntegrity,[/B][/COLOR] and the computer must be rebooted. If the user wants to unload the policies, then the file SIPolicy.p7b can be simply renamed or removed and the computer rebooted. :giggle: (y) [/QUOTE]

Verification