New SupplementalWDACConfig
New-SupplementalWDACConfig
[-Normal]
-ScanLocation <DirectoryInfo>
-SuppPolicyName <String>
[-PolicyPath <FileInfo>]
[-Deploy]
[-SpecificFileNameLevel <String>]
[-NoUserPEs]
[-NoScript]
[-Level <String>]
[-Fallbacks <String[]>]
[<CommonParameters>]Creates a Supplemental policy for a base policy based on a folder path.
The directory or drive that you want to scan for files that will be allowed to run by the Supplemental policy. Supports GUI folder picker, press TAB after the parameter to launch it.
| Type: | DirectoryInfo |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Add a descriptive name for the Supplemental policy. Accepts only alphanumeric and space characters.
| Type: | String |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Browse for the xml file of the Base policy this Supplemental policy is going to expand. Supports GUI file picker that only shows XML files, press TAB after the parameter to launch it.
| Type: | FileInfo |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Automatic: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Indicates that the module will automatically deploy the Supplemental policy after creation.
| Type: | SwitchParameter |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Offers the same official Levels to scan the specified directory path.
| Type: | String |
|---|---|
| Position: | Named |
| Default value: | WHQLFilePublisher |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Offers the same official Fallbacks to scan the specified directory path.
| Type: | String[] |
|---|---|
| Position: | Named |
| Default value: |
FilePublisher,Hash
|
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
More info available on Microsoft Learn
| Type: | String |
|---|---|
| Position: | Named |
| Accepted values: |
OriginalFileName, InternalName, FileDescription, ProductName, PackageFamilyName, FilePath
|
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
By default, the module includes user PEs in the scan. When you use this switch parameter, they won't be included. More info available on Microsoft Learn
| Type: | SwitchParameter |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
More info available on Microsoft Learn
| Type: | SwitchParameter |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
- SupplementalPolicy
<Custom Name>.xml - {GUID}.cip
New-SupplementalWDACConfig
[-PathWildCards]
-FolderPath <DirectoryInfo>
-SuppPolicyName <String>
[-PolicyPath <FileInfo>]
[-Deploy]
[-Confirm]
[<CommonParameters>]Creates a Supplemental policy that allows a folder path that includes one or more wildcard * character in it.
A folder path that includes at least one wildcard * character. Press TAB to open the folder picker GUI. Once you selected a folder, you will see the path will have \* at the end of it. You can modify the selected path by adding/removing wildcards * to it before proceeding.
| Type: | DirectoryInfo |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | True |
Add a descriptive name for the Supplemental policy. Accepts only alphanumeric and space characters.
| Type: | String |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Browse for the xml file of the Base policy this Supplemental policy is going to expand. Supports GUI file picker that only shows XML files, press TAB after the parameter to launch it.
| Type: | FileInfo |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Automatic: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Indicates that the module will automatically deploy the Supplemental policy after creation.
| Type: | SwitchParameter |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
- SupplementalPolicy
<Custom Name>.xml - {GUID}.cip
New-SupplementalWDACConfig
[-InstalledAppXPackages]
-PackageName <String>
-SuppPolicyName <String>
[-PolicyPath <FileInfo>]
[-Deploy]
[-Force]
[-Confirm]
[<CommonParameters>]Creates a Supplemental policy based on the package name of an installed app. More information at Microsoft Learn
Enter the package name of an installed app. Supports wildcard * character. e.g., *Edge* or "*Microsoft*".
| Type: | String |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | True |
Add a descriptive name for the Supplemental policy. Accepts only alphanumeric and space characters.
| Type: | String |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Browse for the xml file of the Base policy this Supplemental policy is going to expand. Supports GUI file picker that only shows XML files, press TAB after the parameter to launch it.
| Type: | FileInfo |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Automatic: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Indicates that the module will automatically deploy the Supplemental policy after creation.
| Type: | SwitchParameter |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Indicates that the cmdlet won't ask for confirmation and will proceed with creating the Supplemental policy.
| Type: | SwitchParameter |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
- SupplementalPolicy
<Custom Name>.xml - {GUID}.cip
New-SupplementalWDACConfig
[-Certificates]
-CertificatePaths <FileInfo[]>
-SuppPolicyName <String>
[-PolicyPath <FileInfo>]
[-Deploy]
[-SigningScenario <String>]
[<CommonParameters>]Creates a Supplemental policy based on the certificate paths.
-
If you select a root CA certificate, it will generate Signer rules based on RootCertificate level which contains TBS Hash only.
-
If you select a non-root CA certificate such as Leaf Certificate or Intermediate certificate, it will generate Signer rules based on LeafCertificate level, that means it will contain TBS Hash as well as the subject name of the selected certificate.
Browse for the certificate file(s) that you want to use to create the Supplemental policy. Supports file picker GUI by showing only .cer files.
| Type: | FileInfo[] |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | True |
Add a descriptive name for the Supplemental policy. Accepts only alphanumeric and space characters.
| Type: | String |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Browse for the xml file of the Base policy this Supplemental policy is going to expand. Supports GUI file picker that only shows XML files, press TAB after the parameter to launch it.
| Type: | FileInfo |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Automatic: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Indicates that the module will automatically deploy the Supplemental policy after creation.
| Type: | SwitchParameter |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
You can choose one of the following options: "UserMode", "KernelMode" The certificate will be added to the policy based on the selected scenario.
| Type: | SwitchParameter |
|---|---|
| Position: | Named |
| Default value: | UserMode |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
- Create AppControl Policy
- Create Supplemental Policy
- System Information
- Configure Policy Rule Options
- Simulation
- Allow New Apps
- Build New Certificate
- Create Policy From Event Logs
- Create Policy From MDE Advanced Hunting
- Create Deny Policy
- Merge App Control Policies
- Deploy App Control Policy
- Get Code Integrity Hashes
- Get Secure Policy Settings
- Update
- Sidebar
- Introduction
- App Control for Lightly Managed Devices
- App Control for Fully managed device - Variant 1
- App Control for Fully managed device - Variant 2
- App Control for Fully managed device - Variant 3
- App Control for Fully managed device - Variant 4
- App Control Notes
- How to Create and Deploy a Signed App Control Policy
- Fast and Automatic Microsoft Recommended Driver Block Rules updates
- App Control policy for BYOVD Kernel mode only protection
- EKUs in App Control for Business Policies
- App Control Rule Levels Comparison and Guide
- Script Enforcement and PowerShell Constrained Language Mode in App Control Policies
- How to Use Microsoft Defender for Endpoint Advanced Hunting With App Control
- App Control Frequently Asked Questions (FAQs)
- Create Bootable USB flash drive with no 3rd party tools
- Event Viewer
- Group Policy
- How to compact your OS and free up extra space
- Hyper V
- Overrides for Microsoft Security Baseline
- Git GitHub Desktop and Mandatory ASLR
- Signed and Verified commits with GitHub desktop
- About TLS, DNS, Encryption and OPSEC concepts
- Things to do when clean installing Windows
- Comparison of security benchmarks
- BitLocker, TPM and Pluton | What Are They and How Do They Work
- How to Detect Changes in User and Local Machine Certificate Stores in Real Time Using PowerShell
- Cloning Personal and Enterprise Repositories Using GitHub Desktop
- Only a Small Portion of The Windows OS Security Apparatus
- Rethinking Trust: Advanced Security Measures for High‐Stakes Systems
- Clean Source principle, Azure and Privileged Access Workstations
- How to Securely Connect to Azure VMs and Use RDP
- Basic PowerShell tricks and notes
- Basic PowerShell tricks and notes Part 2
- Basic PowerShell tricks and notes Part 3
- Basic PowerShell tricks and notes Part 4
- Basic PowerShell tricks and notes Part 5
- How To Access All Stream Outputs From Thread Jobs In PowerShell In Real Time
- PowerShell Best Practices To Follow When Coding
- How To Asynchronously Access All Stream Outputs From Background Jobs In PowerShell
- Powershell Dynamic Parameters and How to Add Them to the Get‐Help Syntax
- RunSpaces In PowerShell
- How To Use Reflection And Prevent Using Internal & Private C# Methods in PowerShell
