Configuration profile problem - Microsoft Defender Application Control

Question

Hi there,

I was testing around with the "Application control code integrity policies" in Microsoft Defender Application Control in Endpoint protection.

After deployment, I realized, that the policy corrupts certain MSI and win32 apps deployed via Endpoint Manager.

After disabling the option again, everything stayed the same for every user. So the programs stay corrupted, even though the application guard isn't active anymore. Any suggestions?

Things I checked:

• Policy with Application guard disabled again is already synced to the devices
• Tried to reinstall one of the corrupted applications to no effect
• Checked local policies via gpedit.msc command. Nothing is configured

Answer 1

Are you referring to App Control or App Guard? They are two different mechanisms used for two different purposes but you've called them both out in your post.

Also, what does "corrupts certain MSI and win32 apps" mean exactly, in technical terms?