Application Control for Windows

Learn about Application Control

Overview

• What is Application Control?
• What is AppLocker?
• App Control and AppLocker overview

Learn about Policy Design

Overview

• Plan application trust and code signing
• Use signed metadata for scripts and non-PE files
• Applications that can bypass App Control and how to block them
• Microsoft's Recommended Driver Blocklist
• Example App Control policies
• Managing multiple policies

How-To Guide

• Create an App Control policy for a lightly managed device
• Create an App Control policy for a fully managed device
• Create an App Control policy for a fixed-workload
• Create an App Control blocklist policy
• Deploy catalogs for unsigned and partially signed apps
• Using the App Control Wizard

Learn about Policy Configuration

Overview

• Understanding policy and file rules
• Understanding App Control secure settings

How-To Guide

• Allow managed installer and configure managed installer rules
• Allow reputable apps with ISG
• Managed MSIX and Appx Packaged Apps
• Allow com object registration
• Manage plug-ins, add-ins, and modules

Learn how to deploy App Control Policies

Overview

• Using signed policies to protect against tampering
• Audit mode policies
• Enforcement mode policies
• Disabling App Control policies

Tutorial

• Deployment with MDM
• Deployment with Configuration Manager
• Deployment with script and refresh policy
• Deployment with group policy

Learn how to troubleshoot and debug App Control events

Overview

• Debugging and troubleshooting
• Understanding event IDs
• Understanding event Tags

How-To Guide

• Querying events using advanced hunting