Reply to thread

Message

<blockquote data-quote="Marana" data-source="post: 1117570" data-attributes="member: 69370">I was expecting that WDAC would by default (when switched &quot;ON&quot;) block the execution of all .exe and .dll type files in a similar way as the traditional SRP does in user space directories (when configured properly), but that seems not be the case... Does WDAC rely on some kind of ISG reputation and/or other &quot;intelligent&quot; screening methods when deciding on whether to allow or block a program residing in user space? I&#039;m currently testing WHHL V2.0.0.1 in a fresh Windows 11 IoT Enterprise LTSC 2024 evaluation version installed into a VirtualBox VM. The only way I seem to be able to block execution of a simple homemade &quot;Hello world&quot; program residing in a user writable folder C:\TEST, is to set SmartScreen BlockMode to &quot;ON&quot;.SWH is designed to allow exe files even when set &quot;ON&quot;, which I understand. But I was expecting WDAC to block my App running when set to &quot;ON&quot; or &quot;IAC&quot;. So, is there a way to configure WDAC in WHHL into a traditional default deny setup to block my &quot;Hello world&quot; App without SmartScreen BlockMode, or am I missing something obvious here? <img class="smilie smilie--emoji" loading="lazy" alt="🤔" title="Thinking face&nbsp; &nbsp; :thinking:" src="https://cdn.jsdelivr.net/joypixels/assets/6.6/png/unicode/64/1f914.png" data-shortname=":thinking:" /></blockquote>

[QUOTE="Marana, post: 1117570, member: 69370"] I was expecting that WDAC would by default (when switched "ON") block the execution of all .exe and .dll type files in a similar way as the traditional SRP does in user space directories (when configured properly), but that seems not be the case... Does WDAC rely on some kind of ISG reputation and/or other "intelligent" screening methods when deciding on whether to allow or block a program residing in user space? I'm currently testing WHHL V2.0.0.1 in a fresh Windows 11 IoT Enterprise LTSC 2024 evaluation version installed into a VirtualBox VM. The only way I seem to be able to block execution of a simple homemade "Hello world" program residing in a user writable folder C:\TEST, is to set SmartScreen BlockMode to "ON". SWH is designed to allow exe files even when set "ON", which I understand. But I was expecting WDAC to block my App running when set to "ON" or "IAC". So, is there a way to configure WDAC in WHHL into a traditional default deny setup to block my "Hello world" App without SmartScreen BlockMode, or am I missing something obvious here? 🤔 [/QUOTE]

Verification