Application Control
App Control managed installer, ISG and supplemental policies
Keep App Control for Business maintainable: trust Intune or ConfigMgr as a managed installer, use ISG carefully and delegate with supplemental policies.
Advanced
Guides tagged
#allowlisting
Application Control
AppLocker rollout: scripts, installers and packaged apps
Roll out AppLocker safely: Application Identity service, audit mode, publisher rules for EXE, script, MSI and packaged apps, and writable-folder gaps.
Intermediate
Application Control
App Control for Business (WDAC) vs AppLocker
Choose between App Control for Business (formerly WDAC) and AppLocker, start from Microsoft's example policies, audit, read Code Integrity events and enforce without breaking apps.
Intermediate