Edit

WDAC Application ID (AppId) Tagging guide

Note

Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the Windows Defender Application Control feature availability.

AppId Tagging Feature Overview

The Application ID (AppId) Tagging Policy feature, while based off Windows Defender Application Control (WDAC), does not control whether applications will run. AppId Tagging policies can be used to mark the processes of the running application with a customizable tag defined in the policy. Application processes that pass the AppId policy will receive the tag while failing applications won't.

AppId Tagging Feature Availability

The WDAC AppId Tagging feature is available on the following versions of the Windows platform:

Client:

  • Windows 10 20H1, 20H2 and 21H1 versions only
  • Windows 11

Server:

  • Windows Server 2022

In this section

Topic Description
Designing and Creating AppId Policies This topic covers how to design and create AppId Tagging policies.
Deploying AppId Policies This topic covers how to deploy AppId Tagging policies.
Debugging AppId Policies This topic covers how to debug and view events from AppId Tagging policies.