Application Control for Windows

Learn about Application Control

Overview

• What is Application Control?
• What is Windows Defender Application Control (WDAC)?
• What is AppLocker?
• WDAC and AppLocker feature availability

Learn about Policy Design

Overview

• Using code signing to simplify application control
• Applications that can bypass WDAC and how to block them
• Microsoft's Recommended Driver Blocklist
• Example WDAC policies
• LOB Win32 apps on S Mode
• Managing multiple policies

How-To Guide

• Create a WDAC policy for a lightly managed device
• Create a WDAC policy for a fully managed device
• Create a WDAC policy for a fixed-workload
• Create a WDAC deny list policy
• Deploying catalog files for WDAC management
• Using the WDAC Wizard

Learn about Policy Configuration

Overview

• Understanding policy and file rules
• Understanding WDAC secure settings

How-To Guide

• Allow managed installer and configure managed installer rules
• Allow reputable apps with ISG
• Managed MSIX and Appx Packaged Apps
• Allow com object registration
• Manage plug-ins, add-ins and modules

Learn how to deploy WDAC Policies

Overview

• Using signed policies to protect against tampering
• Audit mode policies
• Enforcement mode policies
• Disabling WDAC policies

Tutorial

• Deployment with MDM
• Deployment with Configuration Manager
• Deployment with script and refresh policy
• Deployment with group policy

Learn how to troubleshoot and debug WDAC events

Overview

• Debugging and troubleshooting
• Understanding event IDs
• Understanding event Tags

How-To Guide

• Querying events using advanced hunting