Reply to thread

Message

<blockquote data-quote="ForgottenSeer 95367" data-source="post: 1004756">&quot;Smart App Control is aimed at Windows 11 for consumers and small businesses.&quot;&quot;(Smart App Control) It will be on by default for Windows 11 in enterprises, but Microsoft doesn&#039;t expect them to deploy it because many enterprise have their line of business apps. Microsoft expects them to use Windows Defender Application Control instead, Weston said.&quot;&quot;(Smart) application control relies on artificial intelligence to define the allow-list. Microsoft tried an allow-list approach in <a href="https://www.zdnet.com/article/microsoft-launches-windows-10-s-its-store-centric-version-of-windows-10/" target="_blank">locked-down Windows 10 S</a> in &quot;tens of millions of devices&quot; and saw &quot;no malware&quot; on them thanks to it, says Weston.&quot;&quot;Smart App Control relies on the same Windows features (e.g. SRP) as <a href="https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/select-types-of-rules-to-create" target="_blank">Windows Defender Application Control</a>, which allows policies to be manually defined.&quot; As Microsoft noted, WDAC is SRP.<a href="https://www.zdnet.com/article/windows-11-22h2-these-are-the-big-new-security-features/" target="_blank">Windows 11 22H2: These are the big new security features</a>The new Config Lock should also be welcomed by admins.</blockquote>

[QUOTE="ForgottenSeer 95367, post: 1004756"] "Smart App Control is aimed at Windows 11 [I]for consumers and small businesses[/I]." "(Smart App Control) It will be on by default for Windows 11 in enterprises, but Microsoft doesn't expect them to deploy it because many enterprise have their line of business apps. Microsoft expects them to use Windows Defender Application Control instead, Weston said." "(Smart) application control relies on artificial intelligence to define the allow-list. Microsoft tried an allow-list approach in [URL='https://www.zdnet.com/article/microsoft-launches-windows-10-s-its-store-centric-version-of-windows-10/']locked-down Windows 10 S[/URL] in "tens of millions of devices" and saw "no malware" on them thanks to it, says Weston." "Smart App Control relies on the same Windows features (e.g. SRP) as [URL='https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/select-types-of-rules-to-create']Windows Defender Application Control[/URL], which allows policies to be manually defined." As Microsoft noted, WDAC [I]is[/I] SRP. [URL='https://www.zdnet.com/article/windows-11-22h2-these-are-the-big-new-security-features/']Windows 11 22H2: These are the big new security features[/URL] The new Config Lock should also be welcomed by admins. [/QUOTE]

Verification