{"content":"
","rawMetadata":{"metadata":{"_op_canonicalUrlPrefix":"https://learn.microsoft.com/zh-cn/powershell/","_op_gitContributorInformation":{"author":{"display_name":"Banreet Kaur","id":"92906285","name":"Banreet","profile_url":"https://github.com/Banreet"},"contributors":[{"display_name":"Aaron Czechowski","id":"26784733","name":"aczechowski","profile_url":"https://github.com/aczechowski"}],"update_at":"2026/9/1","updated_at_date_time":"2026-09-01T12:22:40.6067894Z"},"_path":"module/configurationmanager/new-cmwdacsetting.json","_rel":"../../","_tocRel":"../sccm-ps/toc.json","apiPlatform":"powershell","author":"Banreet","breadcrumb_path":"/powershell/sccm/bread/toc.json","canonical_url":"https://learn.microsoft.com/zh-cn/powershell/module/configurationmanager/new-cmwdacsetting?view=sccm-ps","content_git_url":"https://github.com/MicrosoftDocs/sccm-docs-powershell-ref/blob/main/sccm-ps/ConfigurationManager/New-CMWdacSetting.md","default_moniker":"sccm-ps","depot_name":"MSDN.sccm-powershell","external help file":"AdminUI.PS.dll-Help.xml","feedback_product_url":"https://feedbackportal.microsoft.com/feedback/forum/4669adfc-ee1b-ec11-b6e7-0022481f8472","feedback_system":"Standard","git_commit_id":"48cf632fb4b9ad92060012681a500478254de750","gitcommit":"https://github.com/MicrosoftDocs/sccm-docs-powershell/blob/48cf632fb4b9ad92060012681a500478254de750/sccm-ps/ConfigurationManager/New-CMWdacSetting.md","github_contributors":["aczechowski"],"locale":"zh-cn","manager":"laurawi","Module Name":"ConfigurationManager","monikers":["sccm-ps"],"ms.author":"dannygu","ms.date":"08/20/2020","ms.service":"configuration-manager","ms.subservice":"other","ms.topic":"reference","online version":"","open_to_public_contributors":true,"original_content_git_url":"https://github.com/MicrosoftDocs/sccm-docs-powershell/blob/live/sccm-ps/ConfigurationManager/New-CMWdacSetting.md","original_content_git_url_template":"{repo}/blob/{branch}/sccm-ps/ConfigurationManager/New-CMWdacSetting.md","PlatyPS schema version":"2.0.0","products":["https://authoring-docs-microsoft.poolparty.biz/devrel/f1499c3b-793f-48c3-a9ce-20285bcc6541"],"site_name":"Docs","titleSuffix":"Configuration Manager","uhfHeaderId":"MSDocsHeader-Powershell","updated_at":"2026-09-01 12:22 PM","xrefs":[{"href":"https://learn.microsoft.com/powershell/module/configurationmanager/new-cmwdacsetting","monikerGroup":"f98fea35b6ac2b0f56c6ee5ec06ffce9","name":"New-CMWdacSetting","schemaType":"PowershellCmdlet","summary":"

创建Microsoft Defender 应用程序控制设置策略对象。

\n","uid":"ConfigurationManager.New-CMWdacSetting"}],"ocv-translation-feedback":true},"_xrefmap":{"ConfigurationManager":{"href":"./","monikerGroup":"f98fea35b6ac2b0f56c6ee5ec06ffce9","name":"ConfigurationManager","schemaType":"PowershellModule","uid":"ConfigurationManager"},"ConfigurationManager.New-CMWdacSetting":{"href":"new-cmwdacsetting","monikerGroup":"f98fea35b6ac2b0f56c6ee5ec06ffce9","name":"New-CMWdacSetting","schemaType":"PowershellCmdlet","summary":"

创建Microsoft Defender 应用程序控制设置策略对象。

\n","uid":"ConfigurationManager.New-CMWdacSetting"}},"description":"

创建Microsoft Defender 应用程序控制设置策略对象。

\n

使用 New-CMSettingDeployment cmdlet 将此设置部署到集合。

\n","examples":[{"code":"New-CMWdacSetting -Name \"NewAudit\" -EnforcementMode AuditMode","description":"","summary":"

此示例创建一个新的策略对象，以将应用程序控制置于审核模式。

\n","title":"示例 1：新的审核模式应用程序控制策略"},{"code":"New-CMWdacSetting -Name \"NewNoReboot\" -EnforceRestart $false","description":"","summary":"

此示例创建一个新策略，该策略在应用策略时不会强制客户端重启。

\n","title":"示例 2：不重新启动客户端的新策略"},{"code":"New-CMWdacSetting -Name \"NewTrustedFiles\" -TrustedFiles \"abc.exe\", \"xyz.dll\"","description":"","summary":"

此示例创建一个新策略，用于将特定文件添加到受信任文件列表中。

\n","title":"示例 3：新策略自定义受信任的二进制文件"}],"inputs":[{"description":"","name":"None\n"}],"links":[{"href":"copy-cmwdacsetting","text":"Copy-CMWdacSetting"},{"href":"get-cmwdacsetting","text":"Get-CMWdacSetting"},{"href":"remove-cmwdacsetting","text":"Remove-CMWdacSetting"},{"href":"set-cmwdacsetting","text":"Set-CMWdacSetting"},{"href":"new-cmsettingdeployment","text":"New-CMSettingDeployment"},{"href":"/mem/configmgr/protect/deploy-use/use-device-guard-with-configuration-manager","text":"使用 Configuration Manager 管理 Windows Defender 应用程序控制"}],"module":"ConfigurationManager","name":"New-CMWdacSetting","notes":"","outputs":[{"description":"","name":"Microsoft.ConfigurationManagement.PowerShell.Cmdlets.EP.WDAC.CMWdacSettings\n"}],"parameters":[{"aliases":"","defaultValue":"None","description":"

指定可选说明以更好地识别此策略。

\n","name":"Description","parameterValueGroup":"","position":"Named","type":"String\n"},{"aliases":"","defaultValue":"None","description":"

此参数将通配符视为文本字符值。 不能将其与 ForceWildcardHandling 组合使用。

\n","name":"DisableWildcardHandling","parameterValueGroup":"","position":"Named","type":"SwitchParameter\n"},{"aliases":"","defaultValue":"None","description":"

添加此参数可授权Microsoft Intelligent Security Graph 信任的软件。 此服务包括 Windows Defender SmartScreen 和其他Microsoft服务。 若要信任此软件，设备必须运行 Windows Defender SmartScreen 和 Windows 10 版本 1709 或更高版本。

\n","name":"EnableIntelligentSecurityGraph","parameterValueGroup":"","position":"Named","type":"SwitchParameter\n"},{"aliases":"","defaultValue":"None","description":"

为 Microsoft Defender 应用程序控制选择以下强制方法之一：

\n\n","name":"EnforcementMode","parameterValueGroup":"AuditMode, EnforceMode","position":"Named","type":"CMWDACEnforcementMode\n"},{"aliases":"","defaultValue":"None","description":"

客户端处理策略后，将在客户端上计划重启。 它遵循 计算机重启的客户端设置。 在设备重启之前，设备上当前运行的应用程序不会应用新的应用程序控制策略。

\n

将此参数设置为 $true 以在客户端应用策略后强制设备重启。

\n","name":"EnforceRestart","parameterValueGroup":"","position":"Named","type":"Boolean\n"},{"aliases":"","defaultValue":"None","description":"

此参数处理通配符，并可能导致意外行为， (不建议) 。 不能将其与 DisableWildcardHandling 组合使用。

\n","name":"ForceWildcardHandling","parameterValueGroup":"","position":"Named","type":"SwitchParameter\n"},{"aliases":"","defaultValue":"None","description":"

指定此策略的名称以标识它。

\n","isRequired":true,"name":"Name","parameterValueGroup":"","position":"Named","type":"String\n"},{"aliases":"","defaultValue":"None","description":"

为特定文件添加信任。

\n","name":"TrustedFiles","parameterValueGroup":"","position":"Named","type":"

FileInfo[]

\n"},{"aliases":"","defaultValue":"None","description":"

为特定文件夹添加信任。

\n","name":"TrustedFolders","parameterValueGroup":"","position":"Named","type":"

DirectoryInfo[]

\n"}],"schema":"PowershellCmdlet","summary":"

创建Microsoft Defender 应用程序控制设置策略对象。

\n","syntaxes":["New-CMWdacSetting [-EnforcementMode ] [-EnforceRestart ]\n [-EnableIntelligentSecurityGraph] [-TrustedFolders ] [-TrustedFiles ]\n -Name [-Description ] [-DisableWildcardHandling] [-ForceWildcardHandling]\n []"],"uid":"ConfigurationManager.New-CMWdacSetting","hideEdit":true,"ms.translationtype":"MT","ms.contentlocale":"zh-cn","loc_version":"2024-08-21T21:18:36.7205003Z","loc_source_id":"Github-72476255#live","loc_file_id":"Github-72476255.live.MSDN.sccm-powershell.sccm-ps/ConfigurationManager/New-CMWdacSetting.md","xrefs":[{"href":"https://learn.microsoft.com/powershell/module/configurationmanager/new-cmwdacsetting","monikerGroup":"f98fea35b6ac2b0f56c6ee5ec06ffce9","name":"New-CMWdacSetting","schemaType":"PowershellCmdlet","summary":"

创建Microsoft Defender 应用程序控制设置策略对象。

\n","uid":"ConfigurationManager.New-CMWdacSetting"}],"canonical_url":"https://learn.microsoft.com/zh-cn/powershell/module/configurationmanager/new-cmwdacsetting?view=sccm-ps","_op_canonicalUrl":"https://learn.microsoft.com/zh-cn/powershell/module/configurationmanager/new-cmwdacsetting?view=sccm-ps"},"pageMetadata":"创建Microsoft Defender 应用程序控制设置策略对象。

\n

使用 New-CMSettingDeployment cmdlet 将此设置部署到集合。

\n\" />\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n创建Microsoft Defender 应用程序控制设置策略对象。

\n\" />\r\n] [-EnforceRestart ]\n [-EnableIntelligentSecurityGraph] [-TrustedFolders ] [-TrustedFiles ]\n -Name [-Description ] [-DisableWildcardHandling] [-ForceWildcardHandling]\n []\" />\r\n\r\n","themesRelativePathToOutputRoot":"_themes/"}