Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
What's Changed
Deploy-SignedWDACConfig
to sign and deploy a WDAC policy, you will only see the prompt asking to add the signed policy to the user configurations, if the policy you are signing and deploying is a base policy.New-SupplementalWDACConfig
cmdlet, changed the parameter name-FilePathWildCards
toPathWildCards
to better reflect its purpose.New-SupplementalWDACConfig
cmdlet, changed the parameter name-WildCardPath
toFolderPath
to better reflect its purpose.New-SupplementalWDACConfig -PathWildCards -Path
, it automatically adds a*
wildcard at the end of the path and you can add extra wildcards to anywhere in the selected folder path too.-Deploy
parameter withNew-SupplementalWDACConfig
cmdlet, if the selected base policy is a Signed policy, you will see an error stating that you should useDeploy-SignedWDACConfig
cmdlet to deploy Signed policies.UserConfigurations.json
file since Defender already scans all of the files on access.Set-CommonWDACConfig
cmdlet to be easier to work with.New-WDACConfig
cmdlet.TL/TR
This update improves the overall experience of the WDACConfig module, makes it easier to work with and implements various new checks to ensure user error is minimal. The goal is to minimize accidental user errors as much as possible by implementing useful and intelligent checks in multiple parts of the module.