From a452b22c3057d6e2e3bc440c409e666a6e603036 Mon Sep 17 00:00:00 2001 From: brbrahm <43386070+brbrahm@users.noreply.github.com> Date: Wed, 30 Oct 2019 10:17:21 -0700 Subject: [PATCH 1/6] Docs for new LOB Win32 Apps on S feature Intune + WDAC have partnered to release a new feature in 19H2 which allows enterprises to deploy supplemental WDAC policies to their S mode devices --- .../LOB-win32-apps-on-s.md | 68 +++++++++++++++++++ .../TOC.md | 1 + 2 files changed, 69 insertions(+) create mode 100644 windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md diff --git a/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md b/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md new file mode 100644 index 0000000000..e49ad2532e --- /dev/null +++ b/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md @@ -0,0 +1,68 @@ +--- +title: Allow LOB Win32 Apps on Intune-Managed S Mode Devices (Windows 10) +description: Using WDAC supplemental policies, you can expand the S mode base policy on your Intune-managed devices. +keywords: whitelisting, security, malware +ms.assetid: 8d6e0474-c475-411b-b095-1c61adb2bdbb +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.localizationpriority: medium +audience: ITPro +ms.collection: M365-security-compliance +author: jsuther1974 +ms.reviewer: isbrahm +ms.author: dansimp +manager: dansimp +ms.date: 10/30/2019 +--- + +# Allow Line-of-Business Win32 Apps on Intune-Managed S Mode Devices + +**Applies to:** + +- Windows 10 + +Beginning in Windows 10 (build 18363), Microsoft Intune enables customers to deploy and run business critical Win32 applications as well as Windows components that are normally blocked in S mode (ex. PowerShell.exe) on their Intune-managed Windows 10 in S mode (S mode) devices. + +With Intune, IT Pros can now configure their managed S mode devices using a Windows Defender Application Control (WDAC) supplemental policy that expands the S mode base policy to authorize the apps their business uses. This feature changes the S mode security posture from “every app is Microsoft-verified" to “every app is verified by Microsoft or your organization”. + +# Policy Authorization Process +![Policy Authorization](images/wdac-intune-policy-authorization.png) +The general steps for expanding the S mode base policy on your devices are to generate a supplemental policy, sign that policy, and then upload the signed policy to Intune and assign it to user or device groups. +1. Generate a supplemental policy with WDAC tooling + + This policy will expand the S mode base policy to authorize additional applications. Anything authorized by either the S mode base policy or your supplemental policy will be allowed to run. Your supplemental policies can specify filepath rules, trusted publishers, and more. + + Refer to [Deploy multiple Windows Defender Application Control Policies](deploy-multiple-windows-defender-application-control-policies.md) for guidance on creating supplemental policies and [Deploy Windows Defender Application Control policy rules and file rules](select-types-of-rules-to-create.md) to choose the right type of rules to create for your policy. + + > [!Note] Policies which are supplementing the S mode base policy must use **-SupplementsBasePolicyID 5951A96A-E0B5-4D3D-8FB8-3E5B61030784**, as this is the S mode policy ID. +2. Sign policy + + Supplemental S mode policies must be digitally signed. To sign your policy, you can choose to use the Device Guard Signing Service or your organization's custom Public Key Infrastructure (PKI). Refer to [Use the Device Guard Signing Portal in the Microsoft Store for Business](use-device-guard-signing-portal-in-microsoft-store-for-business.md) for guidance on using DGSS and [Create a code signing cert for WDAC](create-code-signing-cert-for-windows-defender-application-control.md) for guidance on signing using an internal CA. + + Once your policy is signed, you must authorize the signing certificate you used to sign the policy and optionally one or more additional signers that can be used to sign updates to the policy in the future. Use Add-SignerRule to add the signing certificate to the WDAC policy, filling in the correct path and filenames for `` and ``: + + `Add-SignerRule -FilePath -CertificatePath -User -Update` +3. Deploy the signed supplemental policy using Microsoft Intune + + Upload the signed policy to Intune and assign it to user or device groups. Intune will generate tenant- and device- specific authorization tokens. Intune then deploys the corresponding authorization token and supplemental policy to each device in the assigned group. Together, these expand the S mode base policy on the device. + + +> [!Note] When updating your supplemental policy, ensure that the new version number is strictly greater than the previous one. Using the same version number is not allowed by Intune. Refer to [Set-CIPolicyVersion](https://docs.microsoft.com/powershell/module/configci/set-cipolicyversion?view=win10-ps) for information on setting the version number. + +# Standard Process for Deploying Apps through Intune +![Deploying Apps through Intune](images/wdac-intune-app-deployment.png) +Refer to [Intune Standalone - Win32 app management](https://docs.microsoft.com/intune/apps-win32-app-management) for guidance on the existing procedure of packaging signed catalogs and app deployment. + +# Optional: Process for Deploying Apps using Catalogs +![Deploying Apps using Catalogs](images/wdac-intune-app-catalogs.png) +Your supplemental policy can be used to significantly relax the S mode base policy, but there are security trade-offs you must consider in doing so. For example, you can use a signer rule to trust an external signer, but that will authorize all apps signed by that certificate, which may include apps you don’t want to allow as well. + +Instead of authorizing signers external to your organization, Intune has added new functionality to make it easier to authorize existing applications (without requiring repackaging or access to the source code) through the use of signed catalogs. This works for apps which may be unsigned or even signed apps when you don’t want to trust all apps that may share the same signing certificate. + +The basic process is to generate a catalog file for each app using Package Inspector, then sign the catalog files using the DGSS or a custom PKI. After that, IT Pros can use the standard Intune app deployment process outlined above. Refer to [Deploy catalog files to support Windows Defender Application Control](deploy-catalog-files-to-support-windows-defender-application-control.md) for more in-depth guidance on generating catalogs. + +> [!Note] Every time an app updates, you will need to deploy an updated catalog. Because of this, IT Pros should try to avoid using catalog files for applications that auto-update and direct users not to update applications on their own. + + diff --git a/windows/security/threat-protection/windows-defender-application-control/TOC.md b/windows/security/threat-protection/windows-defender-application-control/TOC.md index 196c8dc9a2..32ae5637c6 100644 --- a/windows/security/threat-protection/windows-defender-application-control/TOC.md +++ b/windows/security/threat-protection/windows-defender-application-control/TOC.md @@ -36,6 +36,7 @@ #### [Signing WDAC policies with SignTool.exe](signing-policies-with-signtool.md) ### [Disable WDAC policies](disable-windows-defender-application-control-policies.md) ### [Device Guard and AppLocker](windows-defender-device-guard-and-applocker.md) +### [LOB Win32 Apps on S Mode](LOB-win32-apps-on-s.md) ## [AppLocker](applocker\applocker-overview.md) ### [Administer AppLocker](applocker\administer-applocker.md) From e2958a11f48c4b7f3f41c66220f1603edc2bcf75 Mon Sep 17 00:00:00 2001 From: brbrahm <43386070+brbrahm@users.noreply.github.com> Date: Wed, 30 Oct 2019 10:23:26 -0700 Subject: [PATCH 2/6] LOB Win32 on S add images Didn't include images in first PR --- .../images/wdac-intune-app-catalogs.png | Bin 0 -> 24601 bytes .../images/wdac-intune-app-deployment.png | Bin 0 -> 15056 bytes .../images/wdac-intune-policy-authorization.png | Bin 0 -> 24116 bytes 3 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-intune-app-catalogs.png create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-intune-app-deployment.png create mode 100644 windows/security/threat-protection/windows-defender-application-control/images/wdac-intune-policy-authorization.png diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-intune-app-catalogs.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-intune-app-catalogs.png new file mode 100644 index 0000000000000000000000000000000000000000..754cf041ba1cc5592b2c7250ae5d669b97996dec GIT binary patch literal 24601 zcmdpebySpJ(D14tDX`>HA}rmAbSW&0bf>g*N(d+jNXP;UNOwp#BB3D70@8vs2)J~o zbbJr~;*E2@bKduy@2`(PmS>+kb7$_%+_`h-&fQQo6}fx3RJb4z=$`yjm<9-h1qOj` zQ(@l$-b{R#`2hU8<)$Gg4Jsd?Sp&XcSU*vI0s>V=;a!+v0^e=bl(b}l|DYGm|MB_P zSI7VK=0CUo_3YgI4@&DF#Fqcb=lusUO8^|byM~G;h=}9?0}rpT_+te%JyYu!9$x;z zQ3;ua6Zw%2a@N@T~77vgr1cS@rFECXAEY*kzkp2T3Gd$>+tvyWn z2zxUC==<)IUIR!a0TLSo>XrU)k1E#CrYlI0`HPUharFV*H3!t&{CGCF=L7+O9++jx zh1A1>V}SfEKm4yAx0=VjKfdbY>?*M-t~0{D=^@!P*pW^zQn%9Ljj4!nN6hcHOJ1~! zSkT*`7F19q%BA$<);}is5AO3d zQ$U1C!a5U2K=)*dWB=lgSGw~ufIvz#91j1@oVzykL?JiE+s0>f(=muVa_xp=(8m`_ zx;Hrf!O!ah0A@g(G(X60WEtBYHm(zgdzx+I^ft|G=NVtRqV`9bKiv~>7(d(V9RT}I z4d{HMJZd8QQKy9|hH*2>MX##;muj zh|$^P4-C-_%-Y_*=nImC=@Q*8aUShXg7*IrgQmZd%5MY#!s~L!1Zacwg!4K6cVqm2 z*oEHx%J8k9nv~sL{x>RpQcCEuo~Foiju2`Li{v)yO??*1_QQ^#x*~6N9d1~#ZR1Rb z_@e>;Ns@GV!*{~pN)WX>Bt+DE7CR9U&EHl=BD`{Ax3=#5r7vDjLCROmBD7ImiaLVm zA*QVj#D>hLn$IE*D5c_b5r?_dh^H@6fsJn-{3Qb`0zAIiiO#FO>oM(-+r`ZS5Iz?t zXX>^T(pO)>nSp;%epSUxud`t!K@}aBH1Y0*yZ*+E*^NL6gL1VuI5vMELiV@&(#=q~ zH(E!&b=0gd&V(C^v2a!P%+~e0N1U9^J-GO^d4uD{oOm~CiJhUlo1;>qU?7i$&ZeEL zcQxsIc@DOHI@YRS>*%oox_Zb%(UxF(tM-v$V8qkk zZGD1lbo8ccG$otY{PYZ!L9Fi4Ajc3qmh9jh z#db59<~0f871A{X&;#DF#YV4#?2MDY@G;02W3ag>OPIqn;zxJKTx({`SQJ&Q?QSdF zKTF;SIlUDT0(hoINgOr%@LcU77H#`C&oPY*&n}MTfa4d3Cwo! z3>|pftW@v_;}u&yoo$rDdOdgzQ88Hg%MO0%&25HH@WlFjE8A&3La)(Rt+5Z5IXdIi z<^CJ=$MxPP?C$C1&N7F+9x@hZI94@IJ#em|9wKa+|3Gm_OyyD~mLW2$b)>~o6&g

!AkqN||f=g+{x{}>FtW1+c%7BUITA2&OD{t?fY4frCtvW{Ibn;R4^ zM|Y3iyE>7t#ScH*3DxtPFd>?OIj^Mt@cq{dkAJOW&%sq9SPS`76!*Q%Ph_ElchlZz zW=nJ)wF zrkO3zO1PTeZQANzzb_%tA&y>$@9}qd?s5VK0~#066+i)0c(jW~kcXAv*H4*i1C48GBYw?)Cjeo{H7h0 zdLASGVoC*`Yv>d5OUEwUw{ypoxK7{niLfc-#krXu1k{56{{7&lE2B9zSWm#5Z_eiR z=u^%{hh~B2RCQqeV&5fGKqg4f>7SE()RQu!aEhJJ(=rT4n-;L9+k@`)5)-zSU)6MI zp2f1HW9kqE4(&>L@br;Dy|4-r~6fO2QnvYLhu0J}Hz46M&ZMoa1$~hhO?1 zGegU~8ryP567?W1@r#a$r#M5QGm!%bkFl< zA{q?1Z*{zG5i+YIo$%$Qx|%e(3j$fai+2?oRx|Rdkr6Wgs{vS9T9hg^w&Al)dV(S* z*Ha&;D;;nhq#*YIXK0$=pwA~nzWMwu-@fb>?9ZDS{k)CT=A+6M$W6RgwJgQ92ya(C z*E2=7AVB`F4&)T-qIZuwB*`Gq8~E7<_ig2zF;|bFq!GFdiY%cou-S|~SMIWIA{uBt{Zri^EQOFn>yR-lK z)bUvsCcxx8!Ivhd&DUUTakG54Ra zGq8s~$AE9%jQLA^_6;odKd^a)3@UXotAfr1EjlQu6;z)-kRG z@uQ5f7#uMSCrDPCD~(;o$oYqf2v;(f`gj!J4P=wuG>aJ9{-&m0#-LIgGtrGGiFFh6 z7V|Jg4cw?t?1WzS8_#qK<4>fQJFvEQ5g;chZ?u7>D1c7LQ9llKqk3K6oI7B-M;}ub z4f>nQRy5LU_${Raia)AzKH^@ox_s9o!8?D;Aux}UFT4JME=D&(&eOP}Hn&9?ZoTz+ zT7sz;o(ub1umlNKuwsgg(|BZ3H+6s=LNLBR!!Gp93E$^5>eT8V)sS1FerMPriVn#> zfy;ipf0WcUmF6lEz;^pam!^F1!wF6&3z&&4(oHCaKmF^(Gu|gRilOD~Lre}Wc3mRQ zB2{o0laNJ|r0$sTG-4jVrm3&DyiTtU2IoG1{_N*x?1%3~$;(gv9F{TWZW7f09_+~d zqL}>d9n$doazJM&oW1?y%gd0)o#aGkzq!Q%(+A@Bsx54z1v1(YPaLED!7TTX!nAsb zc2WtRIi`&OKa)*tP$mc(IgT(fNq(D=y@G=jrqn|0?D&~D$T|Czoe)W5Y`q1qk3d2`kOyRZ9!yDD3igx9$G!!!X zAMjKp*b)R`i-MpD%UAiwzQ+fDj7}wZcvws#L5hgs3m!y0L5Xv@lyd0BABm$azMFg= zdS;F0>E*?e#z^-E_a3A$pPF8-{4u;Vg1jk1)$~w<@-w&jr#aJb64j(%{z0IM_$yXsJ*`^LU^th zd8`a$^~4nPjU0n6_jleriSJ5umI~BLC^B(f!0-!w zXP$en&YjjCWByA|Uaj$~QRr_`^_n(YX&=ALH>y*;a%8Zjfe+kOm~a{%ldI=M{6B9& zTv9MfsAfx1^%(5nM|DKj&Zvr0p-X?M1W24exE1LSF6bGb3H{7o>4b7UP@qTEQSWVZ zaph;sCd{Xh@iHWVdC~5tXc?$8XOX=kG~pcY4t>*fdGfFZ!aZjTg9ro-pu7cDNlHAA z(@XvYKe_x-@fCvWGRutJyvCCCs~Xt5T45lCEw?qz9mTWv&bt!Bn5}3_6XsBYGeYv; zIp6-_fu-L_!Kc!V+Us1qSg2pL?^98+4=sLM;caMSBH)|N^V8PvKwPF~a$sCNQ@ks? zTh5MR;CNXjo$ok+KupDNOh44^EAcd*%Yamrieo;K^zugeSC{8P_=gPt%3l;1XCsmI zPn)T-{H(fI5@Og?_U7%&uo=}L_3DTE;H3p{EaIh;7F6VED%{-LguEzhb+L^o%C z4csC4r$^4!e3XiG+V5+X^lelZr-vx@KiXY+Lc!!Q{5Yhk8)yHNN^MKOnAq$e`^DLc zpHN1)ZNm&3-Ko>Baq!ZyXaIfxnf`U(bwY{ETZPV3Br26S{xxIjDYnX3A`|PM7WD>~ z)^k-n23ab1ck;%cNJB(S;SsJ}ioy z-v5eTdpjo61rSslx08Kznz#`E4FoV_~ywWMaB#j{4{dIm`Vq_=Mf-r@*AgXfo0gRu4t#7`dtTZ9u zK5U4K?;|#_v|-~Ro!k!;Lk5?$DU26tilU6+;LG%(lJcQ*LmaG zd>+cgXY%+xKn2XQ@LneQ`T24ci2XYxmV>R!@sBUVCUGm<-~0&p)rx=NNqg@f=}A%= zS9^T>b8 z9}CJvQn|3Q4Co=uQ64Hj8f4M>k3IjjN!3nj7b2DceS{T?T*XI$C)@gp->?0T){#_u zTP$A0zp`uIh`EeO_eGqnz1i?Hn&P>j3vJa#$CM;YP*#C_@N(17UgB_woE)aP3# z<9E;Rw}l*+#qIxUcyqy0qZNw<|0@VWMGs|?&}qq3Uu5+EK0g}O5D)iporH4^Edr9l zMouJC)LEK}H@x{Q)t@e2+&%KpM{+#vr247mV2GcZBL6E>6d&NXSL&1%vf8FIGj1Qz zjfL2VNM`!!<~#d12{G)M&7|Zdi%Up!y)}Ld{+e@)j|`agIcdqF>fN8bICt3+lWcY=poX^Y@$j4TO?+gv4lYHsZv}cux;oo%|8c<{g-~16mNQOSxgxsHZ;J3f5Lau9;_}T12u%6zf|Ys?_h3#ye0?{oim0Fz zRZBYeTR)2q$W`6%zb9?zPn;~+Jg-G?4#B;F#}uWidpmmx=te0+2+w7SiB__dW}j6dnU=3vs7B()>vRY zdRX@i;iiiwDLD5{^$dRm;p1h{V=N1{@uo_yAvVb~GdW@J41)yEr ziO|FGCzrn#h{09{L|@Aq??l~(V<_gt5+#J!X38(8qv_BSd27zoXnEXPIS1k(WT9gyOXT!Fbmw-^)pn?0W??ct)aoNp2JGnId$D#1x@>>Srx6i)%~ZP*N7CahU>^4+Xb{hB;>S615JTb)V7<}Q zl~p9p93%aPbX&GXm?xjyNH^_m>AtQg^R~0-u~7=`Qz+ zuX(4jf%SGv>R7Elzj-IOcpdVX7G;qu$(JrI&=fHS;`dc%`dp?(CNwa_-9H%wS^mi9 z?Mek|896cEki$1c5vVjMBGedIk*m3l`&p^u$in?zFOHsvIuq;~QtUG$3Y(k1=eaMk z4PjAf2XEKkAJ)d*5t_aY$`A7#dH{FWK#2uoGX=~b)+MJKtYDKRa-Q3a)YaM}8`bx} z7>Kcy_YPW*ymH^3b;0};)2^}sY<=X>D-x975PnlgtcGU@t~lX!9Nm_mi|`TlDII$s zfPrUx<41)$YwD^GC4(E!4urZ$Jf(`kQOqa>g3w+S?2=oi+4y!S9m!1@gc^Fdh*I6~ zC>hMQHyk zoGB%ORd>Fa;j&l6*&X&=hCq^Ql>`FD9|Q!r)h-DLkUQB5YV5!tZAYWMz7Ah}5wNir9nCXc0R4fPU{T}@*5&>KXp=i@i|E1rA zgIIsIZZs@|{OAV&Td+f*QTDzm?B8vhRxcB_OPY8;;toz_F!9ibdo38R{K41XnBpYy zIudnzA7M$;uu07&by4q4hs@TO^rQKit}5L@{y2NUKJM;|-xJB$^Z}~abe(oHlZfkN z;=Sh>rmw}b>C`LC4#$!Uxm<1$F|fu;g*RT7c?cix${dDE8sBOa04YVuK`ISXH;VWx z$7C?*18{xAc1;+Y?c&QrSgNApg?FztLH@VA5MbRUmP5&m4EsEA5O%R%&Kh0x9K}!G z*S5tc`-86b=nAIWAf=El$llFvPL!lX0!GA8Xx4UC{_K}(enIUy1F{|n_*)LWkl>Ok zpBV{*k`V#<$B3L|*^d!jW`kyP?i@B>cgpzB?=ZC?0IskoE3-ceO?&glvoizCfef6T)DiTf_{#G>hM!l%`7bZ?ZDB7|@Stwn8KP!Kh?MW}lQMtqB(<d{KP@l@kj z4Ya1L6ffZBLl9BN38M_M=IdY~6C$3IyWV5O6-k-v=4ZK;t4U{pCBKtrS!Os^CwsGx z#a?@Qu>5@af}$rxlRSCx`YsCsJYN4v()kq>?z5hkugc5Twv@Wfnr7$bGu~nS16T!f z=567nk62bW1@7!>P!SvkX-l@uqqxHtMl2m9hKFbK_}DZKNxvGQPqJ1WV(WqkFtzKT zdEq20MFyk{(v+~3W$)S&ZUG4XMdKX zULULdwN0ff#>O!6$^f^^=3$YI>RyL?`<(|$qC{NDPYu7=$r&hg$SyLK&v$SuPv}@j zC)|yIzbzqQQ+GAy2o@wjUe<4LE z#GtFVl!7W#D5b8vz{I6*10-4mw`lTdCA@VQa1sfu4~$%&v>bdH2Gt$8>#W!+f5KCh zW3yZfUfc6#JJ~$rbTOMN29p%v&ZclZF%fS?Xi1(Xlv2kRVmdr6YUU+Ef8DyRy0iwz zn0Ly)+-qwUI2;o_z>d}_=bLPH<0eQ^3jVoAV_jSu#Nlh-Yw9NMa{T-!q7|p^O-I^m z+cU_!>jznM8RjSk!5u*+o%~X8*jTX|BB|Pn6o`QKY2>B!eNJZ(C63Z;?XS_1GtALK zX-ZRys#Evmag2yr1fU5jHiG63q!ATagc;9KV)2D^^#eO}COy(V7Zi7tfj-tZjXo_T z^n`))Iuof~tRs@9t1#c=+9z(+MQFv!D=D+Pq5`x+`NcC^HJ-%liueFV^()Dp0R>9 z&C~~d-YRWDERj4S9d#}SbD5JJ4pbq%5{d1hhZXw>w!YSa8?FjJ78V!6N4Q)mba5}| z+n)x?U@8vknXXQ$Onv2Qqr0Tm!L2W_Dgzl0MLX`7|-(`x7l;bET;Wv-V3q_^IpjS6n4Z};> zGUwfCu9#y}3aO$k*ivSSHJ><(4(TaL8&pcr>m2?)bekqdK7xX7dVS*QW8|NO5J^_ipUK*VkARUKD1M3 zNoClesN*M|AUw<4fJAy{WLn(jH`T+88h1w8$%br;^8Vn+9wq(~DAS=Fsbtdq{#QP= zzxm*zMz&m^@_lX_MOQdNMf(sXWqm%c+2H~K#$NegXAN^Kdh;erPz%V5i_-X|>6!Q_ zLWs38oJd_31B4Ic*`8(CqXvL12Mp#40=)yl)3{Ux&E=Rph|vd4q##ouaaXl83E#{G zQW~4zg>dcyKK~vlpWp`32}Pi=$&9k~VDLQ`;Z;qp0s$dNsXy4d_aI`zAXJga{4>uh zJk=p$BzDr#@_Rl4ka!x;HQ!+RW@$RHSRMLhu`+P@??wEOJ(9v}mvr>O&nCZJY9#h! zyeWV~_Svhd*nBJ`c194yWe^WPkDIH4-=gZ{YM-SikkSACZZLkLmDE`(-{1+ODQuU~ z;q}_En9OB$ldyjKst1q^HrPuhein}28jO2`4Gk#RD*{j2bXcT+zCn(>Nn@~F{g*U` zEiLg4H^2d=*mp2w&uROT#J^}anpg^q9^rxjdqS3>F@*U3d{XGNd+nOcMBI9wXIu-7 zq#3{#|J8hk7!!}q+>9b~%45Pjxv%CZ;7HcZ5QkTxs+JJT(iHXf^sEQ@p|rjng^2@( zV+>{ogDoc+9x}+~YP|Jjh+VROKq&y-FP2{v=vF6$yDOwsIKf_ZzdPIO(`Sx!&5vOH zMU?3fH`=k2ZJEV)!Fx2SbJHp4M2d2ZM^=C^}|iq!2&yca4JwxsAbqvr7|_jP%ilGtH*mF26Ni*R5~ z9GK+kC?yzopA8F!T*oaR(97;i;)qPyuM+uH@nJ=r3v`gTjZc_4v@qxaT#!M~2ohjoMIG%ie~Ef)_>;!ey&5n*mX5 z0&T4EGE+kJv+_Uq3MTh!eOjLehBFM`Z+0^3fM^x%>5@(a{RLVKOuqrH{)egzf@HKMf6D4V^wH99c~CktSm|V9fSwX{(+@$T_N| zF&ahaRmYP{1YXDuMF-C!65!t0OFUMNc`)g6VTJ0*-)sgiioD=+i{=pOD{j=)^rAEF z;s%CP+-_43#o^qzj~t<^0bN|6WX;S^aZ7{CX@6gJC~onW?D-@2pP6o{BqmqlFhqi4 z%lGp;nBj)_M&5|fD+S#qI$b`QT+*K40E$`s}Rc~-tq@os#F+!L|JUr znWXz;3^9J^dw4^RR5WGnJDW)i{KjUK0E^@ggp}Q3&GicP!3$_Y@4D|>u)e3ybPlTc zRhtUtV}%7Rxsv?MQOq;Xu!B8>R=T)CfPnUDpiGET`Im*`=!%z-cwg~422E)rne@vD z<(zWo16fu$nL`^APO)iD15V$Jie*?cAFDmPqMUjrk8}6A9yA8n*pGjd_NfI|i0mc9 zt4VKNZttWHMgVS$PF5YFq0xm}b%2d!^yzCJG7vwcS58T18XZb6%*f~pTg?po+MlbQ znu#Wf|+h`-=0z97gUkxLIFVS4GS z(2s~q+X<2;q=}C+2PngCKM;TZ8W_-Stci-)RK z%b62oCSxdr5z@UqcZNKbYLXJc_I#rNZlZMljL=w5w&{k6PgcBVo-&pelAhM@cMyMO zRBB?E(u23Oi5I@U8c@-E_weyo77;TURkLc>o}w6jcboX#&o|!_2v4k%dC~}K9}-02 z0z&N9o6aI#E`83tA9#`TX%4)moK6dux+ zNO9WR%L8>DX$CT1{pWO{J_ZkzaqcdTXEukeZ;aOB)^C0$R{PQ((*BnuQ|gvwAeDHT z)aolZV)fx3UU@2=O4E#~@NR^ePeX#?Mv#O~rWwDGd1q1Sai6u$pR|kZ8YMvA${F^0 zx#ziZcyqxee)W>xo)o`dzQcy<+r}wVl-o()q7Wxj5^l$8xVO&f3b;l% zmMKo*bRhkd%H_Fw^&ty6Q-)C+Pgw0;8k*~(R}UDjYt}xB+YAMQu^75}+Et8Md=G=K z9<4sOR0C>V8>(W6l`x%AUwwoX>6hUb-$Ekb_?=!Jc}cH6M1cK9S3Ujad@Nux_ot(D z^!9dzo>=!kQh?*57gQxt(e@s{DFxl2cDF2LuLYp%U9nO6J)YZrbA9)bOWl- zzdh8q^_ZVSL_{nNv_lJ&1oEyP9$F->zG0`1CR8A4x=?vq@kD`_topENFy!FI#XhH# z97kv_K%pAy#9icT#Ag-XbsXRI19W~o{AvfAG8*t) z&bn}t6W$<9B5B?^`ehjW6n-%i!fQ_9BxFv7Kf^;Eoo2JQH!9A-?=WkIa%}>|Ehw}i zPh2VptvOJm_IPw{2%}XyRKo;Y{wxEhhVje1r`Yp#M-#>=W(OqDbxv+&cj< z7yI!yhv12ryHH8aF?Tz60rUI!7sSXhsWHLtYI@hsU$c?b-tx79nY2wFrZGVU7xBn@ zbga22tXp%)LAMks%wxgcx8S*=#>-t$E7=^jS2691udMhK$U3_Uw%dxv#Xl>&dDm|R z)Xw0R2Pw$Da311kf+p-^hFfvm$}PfUd54*ml}FS}UiQ}Q4&d5#p;N^rQ_4v)8M*2D z4E4AR3v4wi&1~smqm+WF5#Kat8LLCAzvOGGD#P&)Fng^AhjQ66A|CTQ2A>>Vb5@fPu(#IDg~EU#d2yxnh7xEl+l&Gr?QXhco^ z0_IAU;%v2@H6rg+?PdQJjtjx)RV6q_E8!3WZ%L4TK>dayO&vIjJGA>nE=senm!_lO zF0?Z;@oK!z=vaJySQW%^K%SQ7P6X%doI(6zyY1XVv%&<;cvYZG-76!?wlag|`d~Sl zCpt}Wo#0)t3QnDX2rt8zo-*mQ55#7$UEu~WzaTY^90N?-x~|L>YQS9nYDuBfN+x;Ga}3;JSq)-GQXnPq?|wR-E$dZMHwGNrKcC zJm?2h|L{DE5G`AV!A%B+=qf4ewn<5skn( zy67yziZk8rcMAArh1U0PAMQ_iquH&}$_L!f3=E7L!GW5t>+szA+>l!0MD6^^Dnhgr zp{KyR{;0uLynd@?y!N+|p>Cn?uGNZ->^`@4jlLK@OtOAoAbE~;CwZ=gF5%_ja}j<* ztJ`kN#`FV9p}gjPq_V3EyO@)Y3Mr$VC#>PQ&QBx5@3HsRZSZEJedMyI!b^+c_|9RD zHrx9ZN)_cVJeNbsh!W0^o`gvi44x#P?Bv4n+uky0h;|Xm2fyEDePt|J7F8nRrlcW> z98?-zMT7#w(DGM5Am&TSLG4X4=4Zw=lHVK!TBs?M^|}s&eWTmmGY@(``8|NNCt}GAX&^G+JsXg_p&G!jD%yl^tC+X! zMv~X&cj#jSi=bU9#-roj;Nlt`CfI)OGL=*HfKu5|vg0{$xI9iCOQm+EIWflmW)- z>83p+CRqVHy7q2NzSbw_HK$Gh^6E*o-oD==5fxe8scJ`$zz(pM%3+Wa%*kVN9_b4w}iq_S)kY zmPRx#pKWY?Za?Koa?0*n0WHJ5>AB@X@4-=CC{bQ?y4o#8p@JcVmZhS((|!(GH1fyh zj4ABMqNl3c#@pJCzs~aLw-^;4`h{X74?R>NNtsH;t(~69MM>Y~VR997X{IFJb@~WG zR+z|kIy>m3d}(e*ch3%vuc_!=1lwK?IWT!4l7!P2%`I(+1d1ZaCt_>j7M6;*p^=t@ z4zJEWe$Vr>eB*6$f6uo218e1%QjL?wpazzZEG=?J2OeUfK^RtDx%e^3tKG&7)lo>f zxT9s|1xF%&!M=|;-3Zt+QnNf;_95F^{Rg_}_viPgxkU8|tobeEpi`O3S7G9)7N({1 zwoI9;wvhRXbBha44d_0hbo<*)YRXfg&tFpN!R;f&n$IsIM%z#6aQfn%qz%JvxFmIR z*2%A*Q7b|T;B)!5Neg*=<>VkvkeLsba6EV}+?e-M!xD#sU5jDsG@BW%$CFDRZSX33 z-n;vKtt=uzd4Z{pZ&-B+CqHB~Y%OG-tl-z<6%8SitMiA0(UiZF&GJYv;x*k6!=1j| zqwVpg%)Da2T0sxYwP(NRYI-$|;6<@|$BjB3J@B{*!VT&wA}@s%Mb1vCcXVlepOlR8 z?)QFH$&ugGuy)y&?fr~0TKp8pVr?Ux%bx91+o||Y^Hl&&wnV`UDves*SL$%WA{BZ4 zX6aybQ5|*&gIyBCrtd(v~u+{}bNM0^o<)YUD+xwwcz*(kW} z3DHRoPbCJw`C`(*nQ?qy(SA=c2(XdD*Hbc#%`TG z3I6rCNb-JJp3C@k6KDCmkGolcFY6LCehe}wZ;t1MaQ#lO&?B(A&A&iS&n*oYBCOPw zmfzg6xYwsJ;azQFL}Apvt2q~r`?v_)UHih0<;M@|Tb={TD?oo!d$FzJ+g_pnxm zX~6dd4e~C12B}hB8k=@L!5PUxKfUvzMH!Y=$6~HcF$paNE&;i7*$p$tsBsbdRXw6U z466=DX~O_uEttSNc$7UA8GWCE!w)<8D#rn)%vK{OmdZNtpbyb8^kVgkv&L_I+4F_q zK*d$ZBphwZ+w@M6GfPF5R% zh*V$D(em%Hdt_F`$}*>;$fr@~xa)|6uC7tgchr`2S~FmnIwMF{O(Sx<7|gJ3L9`^o zn+^HRvC2Df^UHgCUNkcuPhvfELuJ2&a>zO0R8t=d*Pr+p+vVuSvdrMowHiWYYNgF=iVX%!+$P`cK2MfC~2}1T31P-}|to!;9zT5r#T8X*5)KRR8 zcMS!yrTRl!sHqEnN_6>%XJZCEw1Dl=$iFu>SKrndJWiDOerwVtAy=y;*AJ@kVEU_T z_X~DaP>V*L3F1Hp2+5@GN7;l*KDUA&x;dY%x^L7&`R{6W8wzD-B!skhdok0L+sB{+ zx~)iy_o6$5UE_FUS@PZW%b?4Nd5T_hdo1t6EkYxI6&l6}El~kQ!@V~vlmRe9#4cu1 zfhm$h()DSjm&lOcTmWNs!tkl)g_WFhShohI)19SL0iF~>6RFA51EwJ3>>ancJg`xa z(yPeQ;LonzrZ-$ZT$4k%=`bKqo{B0_E_h?^Sl+K1iOXaJfj)mvB(g4rLH45Eu}?R9 z5eJBej*rmXd)hBSEh~pCs8b+J^kEb%nFNQPCD?)<|O78lm!z9gXmYUolXiLU~^Dj2x{L zKVgb8_6N(1736N@cK?knz#uo&BYJ+3w>r(&g;rTA(Q^In$bRcHDv}Pb$A0n7N8vLH zv^YRG0Ovh5Uw%qO?5L#Ihit~kikFn^LzYKS?Lr*;N`g49^C z_Z?8jL6U_iHFL--wTH(w#+@+KC`4_i(~IYsc<68R|4Mb~TkP#2J`r>@anU?6b{TF| z!DD@)(DOv7<>KVK!7vw)WK1(*kff|fE z`JthV390m~KCG)Yuw+oMq%RcQb(r0o+z$qa>cB_%mlfl>br)-t`w+<&yWFSsmJMI+ zP$LzO;9rI6S69gUd)$@^;yaq3`kHXuD?G;ABVoF#g=yY`Z>H{9sRYKPU|lWxW*Z*2M+RdU z%~c*VMU74}8PbMD(v3~9AZKxCBmLN)SuBW(#C^IbMol;Mk4H9-Y+`bcoineN473%}ER zEhHp;)r{dCiFG(xrw-|}i0D;S1Rd+%D3HB?RC1l;#Z!}4s9<&*P?WB4ahnF1dT_n* zq0H_5>Gq0~KSF1Du@A4BS1aS7w_xYd32$ZD;(e7V{m>7e`E&j8-7*``TTW>pRsW>oI zhYZgapit%8L1=IlE7@A1Tnl|H&s5q6u-yn*wj2;2j9y%X zcWdMw1&-Ejty;%jw_Svq`o^^@Ml=O`$%bm$KMDqm#mLXpb4bs23oMx)#Z+l{3-Wxl zd3BIVRY}aQdfM&Q9PycV6ZznHI5+*3qTbuB;za_h4xO)0$3yAfm^CL0`{AQaviiLT z9B~h&rFiXi=1ty7!qP8%JWYKcao(P5CZdi%IU0>re#Zg7AXfT*=Gtpf<|dGhE6))a zgdh6xK1Wf(Q1jcW{SU5~Iu^DJ{N_wrvn#s34xjl0W)x#R1X15p!5npgugtdgL$7KM z=I}#E$@(u2Nj{W466^hyBgQm5!>vsHutJqea40ZYy@HW|9>vV0QgPxeh)(qDNL%7* zc1}iEzk|=v4r(C~T0Ot;Wq&IjVGXcH@@}+8hZoj^FWty9kC#E2lIneviI?BIeGJ``0?>^FIZ zGh_oJHg7^=;p`>UtpO^eC8NGb;(A@zffx#YxT`K$m(LF8Tw0M~Cj$tjf6`plZ@w?% ze5&P&b&zX=dqR3aK;Gra5lNQbXoan?RpqS7d69}_m43t&M&zu9o$*Y4}n5`RbMzFaTAJjXtL*zeDaU500Bh z?mUtGEkL(@a%AoL2B8!PRz_sQNX$K%2Ko_l8&yBbh3OP>QsYgJTJ(QarwBGCU^aLw zhaQHFDdEIB+oRseiz)ss7ex<2eP!T|0Mq_uJl@hxnLx<{_Br3H)8n0;oy^!nvm9`^ z;L5cty+=m6lP^3@+G6V*+*tKUu$r{*zA#76sO|Q1snH0%fBS6}{v&UW+9}E}gQ6qX zW~jXVrQR0NG)d*M{9xjP6pxjRiBn4Tci7Cc2#qTTca*6}l7u@sZA=ZeJpz)GwFA-d5ieW3 z0=Q@jT<2+_u@y9zN00$2G$4io^+m&>Izf6m=<)0F1HXiuyHOxsffS@3iFwVhYRm&c z0LK4x$P{I|UTfZYSPlfOz^zcF@Vn3}Yj3X!SxM}LvV~HCo38wAheqtq6pz0N!!*&) z#zXu5+!g+j&G!i&XLIL3HZ(o>h5=9#Bm!>1w9G&Hp7<-?4UZsRKA-~hj7;h0(bip{ z0Hnmxs+ahv??aOcFVO4#FXkxiuE!}h+oSz zz4(2WM3-;D{bl}-@!|b-pd9HoNRRz0Sau(Tpzwc#8}LaHJP4J(Nh#m-?2yt0gF)(!$zPE+WM)Z6%S9*C$L}71H z15K2{2{}?zuc;)WQ=nnaJ5Fm0lVM)IqNnwg0Pf9Pg=!f8&i*HfG_a3Xw(7X^u;}r& zY>Iv2Dq)zhr4Vqh@f%P^B!|--{*&pK-LK9y$Z}P0z@)?~tFwM6>Du#C!G*|_{iO9_ z`uauL{QjwZ(r0NktNoHs+16yssrCpKICpqNHM}3SATDJR7|sQ#T>7Il&JGq?KHX%F zuC#mj)2=i$QoAEEb}XoYIk!m4^tgueyR^B?`g0@ocqQBzydl$|q8IQN1jDwd-m~bS%aA3TYhn>!5YVV?s;e zyUwnbs$I=x5cA?XOO?oebw3l-Kr|p`dvz|WJ1+F73s34|dRh3-Pc3``jlkUsak~xn` z`;#N5v6WB{yrF+;q;X>X>6$UU#)lPH-9ZRi^mZx?LhX!}j#f7poG;!kT0z9p>0x2~ zOowTU^VY*NO!fgosu>y+ShYMLh{4+q2tp!olVFN93~e^-FMQxQCM>0J!Kg|8T-8Kb(H@y8P%I+ELTAWP-;%Xz*dbiVqUIu^m~fajXg-R37BR8_#=14hI%BKn+yl`!EaM zOdmeciE8b--hh3$1;&4#p!=K!yJ_A7fB$KPXv6t3>Js?$^W&CT6uNkJY{&o!$Si_B zVqnn{05|VHS_ff&8vY9|UHPo_O7VTQHT@LwWOJm1bma{#TeXUu~dsj9Ojq4S2F zxE9h-3;Yo~jI;+(N!>(^In;|dJ~UwqSi-$)W70<4%k)$8scfH%GBym)uuPmcCv)^! zUj5h2!lFAtv91B@-ftwNY_&&x+~_)>k@~y*L=`wH*f0kz{lNpln9-H4s2K-(^zLx( zqGx;Jlv$!OzcRl;Q&fc|(HZ1nxtM?}#zuy+Um9CG~ zWxnM#0&-X?NL;3MDCGQW?9yEOxKnjM^IA;U#LaIBzuv#N^!Q*vx`0;ck@ zy+~p9w@y^Ks5-bo%F+U=>cB;z31ASBA1fcA%P;y3ilmX4+BDuW_pNLCKjRs|#B<@| z-}@~%=l;e-+;Tf^N9dbq{duC_*hwil%!zx#5vKl4O3u&Ch#^7td))3#*Roe zj#|0DXJ{27yy%-wkw4YN&6A7#D?i>mzQ4@?M@E## z$Y-6J91%a1~zHlTp6_p8I#Ia1PcEB$67xx zGl;6H_Wt66I;n$kn!7pR$M0WK}tYRDodQ2gSp+HolQ9+M~W(VPceVr8uI zupz;cu;NiU=w+>bm(!)9&2r?5Ts3{|zKMOa>aQEXVYqAly@UN|6Bi;E9{~)U@x!x* zitBDiog8g1-SfcKaEnVZWCQ(uX#pe@`$a;cU{wXYGgFf)zXWd zE1VD!=fAbRQ5R22K#)&Kzu##iSYw;F6DU7oj66HkJ)4u9oSaX)Y9pnZqcPKTJX1kO zS*f1%ihJ!&UdnJv=y<8|q$P=iE`H*vvitR4*Bgbn9#C~_>fi|DBxV zC9>aBMw=ia4OhabIPY}NKOZy};gF~GM~bj9ku!^T5oCu;u>}j_1$C}!(9Y+xEr%ZL zXUgvI>QL&1_lxx5S&Us-NZ+AdQX2Sb_b2MV&alhzj&S)eObJ z*crkIwPJEEP!Xh)(ZgTbM|}k|+?pfFp^LXn!(^wJa_qVm5Y*c+CL9ag7G#>@DSf6K zk4sWIt>w!j#hYiP?>Ee+W+tuE_G`Y9FehtI_wsO5RLw-T63^s>x(g z$VJqx!It|=RDd&|_3O(IHObGs%n#0Qg=n!28*;(E)iaptV!K|l>&w#olV`iT76Z)?q=KK2lzXIrZLBy2S45<|SNsWKX+ z+_~^G=dr+PG8J?BfMf0tY;ee!}M} zbim?Gsj=yUO4dQ_u01iPz8-Y032y{C?19}@E+P8^`ECap;Qz$b-QJfqq3%NwuKOPxTzMk~bVi*2dWmYH+B4 z|1E#WVdckktAF>A!;pj4D%A8p?5AOvf&Pr%flz183!k;dEl0eiJ1&%9)_zKh)GIDt zy8UxL5p<#vl8bac_t;}7cUm8*Ofx5U2(F_QHao}}C%k5KKOWss-Z~zkZCQ$=Nr&c`|ZmYS9K*+B^ z*egujLz)hRv4$3s>qDU##r=rEk(5hV*WEnynf|3+zH#kz_%AqfH1;tb?Bz4!o!&Pp z-dc%OiO3fPi5F3z=t(Kun!UhriNkvnrrFqLDL2DP>rx`Mh!-!QR|<9BGv>vYaM<-O zFW#t^341Rc-$ov9LX?~+<@KxxG^R-%`MbI#RVwjwx(QQhzVOVRC>Bb7FPA8RO>UWDM?1CvTd}W3?q~Xs$AR-1= zXMrIZPZi~MYd6BW}K0I2x#kjXo~LuvvrSomFgU7 z<>Xh;bJiJ&`6O)oy~9@Gyc@^Kc6qHyE@4^^mQZ}b0k_%$*Vxovh5yak{7TdMHuIp! zLIh}m?3+t2#F*QlT3umNWaIt;$XUoq92ZGZIwv2;^o?i5^T_>W05+wLlur)n;7Mr4 zhD~~x3r%u7_(ke2#ulBlK=d-6XQ8{6(+0wMk~bg@CdEvYv>GsTP1w1lHb3nAbEhSB z#@PK=p-34e(RlrN5d|*q(yyyYk+5>O)mQ|Q^hb6eUQI=jf>Jfs*jQ;!>#;(45~q03 zpwEvtfuod!z6)IvDY`hfs=>ibv8kuX3Z6ekTs2xbGaoBKTcYjh9rm$BLcBD@puO@- zXk6%Bd%WGhymjmXWxBg(k{Rt___mf)nrbFP_P_QW$yK|Y!JQke{1INa4%e4#OcZ}Q zL9s@bPFEUyLU+&&?b}NCnNb6EGJfaIIoWNRmz$*jbOZH0Sn{n4ft#nS_pLO(^x2nq zQlw{~vDim_`_|4}Jc5_i z1a5NYhDmx}>=Ze(^YPqC(eox~k;`A^|M?WUa`fQtjc~U7E za7(zeoC|jjx%N|S6|Mb)p-g|+FZ(v4i)R`yR(ZfSK{qMFy3hXo@YpVTd5JwtU zFV){FMp}CQmqInKgKPJ*P+TH#pCwdXhAMym=uAixNeRZdxV~V`Gk$^^vVrxuqLI^l zFfhO%{MTR|e#Evmm8fW=APNx8CsMZ|s%YOL3222#0Qi;eww~(Bs{-Wva^=(F<(f|g z2$!p9L?$!`n4%M2beDAd#qL2F>=~2ZK)}X~2$y+TV{Dmak7+6uu?_idDCVylggl^E zu;qv{DxRV*3FzEo6g1VtZX^8K3X+4inPL#OqDlO09VY8<@hjoonR)VsQk3Cy8hb}m z>FMpry7_?$@D>DrRrI#@gS;$Y`0l^`l-l-tUGz*9OU2s3 z(jw}kh0@+2p9>ce<#%7@X?1BoZ`Ijs(;i}mFTQttFB86BY zEs-2i?p${WPD@EW9*Q+ITp1?jqf3b`<3XPqBBfYf+z3W5VGIL*zdmi*2nMaV{{}jl z`oAWnsL|qGpBbOYOi(%F80k?3XpI2wz2S4*TA}NmT5X%6lAzhp{l3W8t-U(eDNAsrrDXi{k>#Asn4rIW64oe3H!3l#Fl6G!d$#I1{}HdW8$tG55>I% zp?e%MCOv(jzLK>V63DI%4@ry8p`a%*kIwTS>8swW*{aWR!Xt$uoV^|@Hy|#X+@|T* zh6SK*EycYx%a1I8!l=x~3wO@U{A%ii%jAUY1|gMs+qC9?41~4aU!iGAJA5*F+F2#x zM;${4ggdehjd!HPVCWN|Wg71{i0Bgb4GPtmjW3H24Mu7x&p$oaq$$5eFP%1McVCug zeeWLnf_AxMVr8J5A~Vlc2k4V&M!TWWdzZhCY1V?fwLHfIw(=eWYtrj&1(p6T%T^Ay zY7nKv`Qx@9m~P2Aiyf;DZFo7);FoW(R09AMtoR4LdhT9vZa6n)P-*Qojk^9osH$)( zOAyRq=AP6^aoy;~=gG>|rWe%_e`}rhZ!8&;Hrq2~U-22eq~4Q|NAxj<7osUU!1VEY z%dmgUG~MO&UkoP%(?};VW`iV3{>Cnv;n3$#GOJnIQJ}v1a4RL=!>S-6sR!xub5-Kg z$os?zZ^(tDr_U0i`$x@c13Sy+syEm6p$7?7a|2+T?>yH}MrS1|`KhZ3cR^ugzW)gN z1u+1N;O@Jwz-Ltra)5WfawKfgJMMCKGg&Ha9l{U(39CPq*W3ZyGY+rt3>1(0=1aU{ zo5D}OcDXMoLI}iNVPdu$k(kr(Wa5*Gm=c2T+JuBQqQOz1q$Tf zWRt{cQkNPc9Ae9!7+S|-aPs{v7M?jbVZ|T2g?UoD#s5^r0nE|xV0t6m* zyl|pdxX{YaAHQ(S?cb4bI3;(x0r}T!V5Y}TqJtYc_~QT9=OJU|^k2fg?@V{tf~rsP OwW%s;LNN;FZ~q4^_Eqr! literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-intune-app-deployment.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-intune-app-deployment.png new file mode 100644 index 0000000000000000000000000000000000000000..91fc4f136b21c4ac1897301697e43e75121c3d96 GIT binary patch literal 15056 zcmdsecT`kQv*1-wRN@Q@NR%N;4iY4)3^_@bEFd{a&gqB1j0lJ%$&z!<8DRj)l5-Z2 z%#bsC(eHb2-#dHu?Ad?zoSi>rZr`rZRb5?GUEPCxtssf}fb;J@8a`5MtgR7okQq_%2HN!wfX@*I(?7 zUMu_5x3vCgOL-n=Ufb^+W&Lek97bQ;7wIj%T$+9ayrr#QXu4a3e!}jI3%=6ZB(0YK zn#bMheE!{R_pcx4aSZ`{OR#&dlJ#SDjUqw7l;LsbI{*pt=jQc+>FOzj32llMplmdC zL-AFaBJ3y}0qpAhfAEy}8KLie>4lqN`)jA@+EWAY)xOWlh8%Zsgf(8^(AjQO?cf6M zX;NzFAm^b9s5(qo_&uPCNJ|@9vNI09Anlr&)tI9O=ILJ<$-<5(;t@@+YNpPY1u=nX zxS5qSs?mrLZOiE5QPd~~G|PWzkA`mw@O>**Wn07BWUu3DFxt=q~L%n+yD8~<@r8TBrJB!^)(|; zr7k#!9MIWuJ^wM+&%|~AVI>B7p>RxJzy0+O7fNyC3o`D1JCt@Y%fbQr54TcC~oi^`ti4f@J5ICc_# zTdSh~pz?PR9PE;?+dxu6$0HEa)t*uVBzrUQ=FmtoaT{69PWmwGppv_d>*o>6_T z-0hHj+*c^zd4u(*!~2AHrH)(+Lw40^D64nHr0Cr$B>{6gQCjLty)i zXA$fd_|xBJd*LEmlq^x7ho>(MyWPB7e^HO7ZXZkL6lkx>}OzA z@i|DL{MG*ia%&zbr(v!aZQQ6$fA&mbptdLLXkI5rb+X`PG{s}bOL)S{@+8%4_#ZW= z#aPi*Cm6r}1atG&1k7PJ7bWp+iS z+qjcI%R^|V741yR`zCtXsv2A*P4OoSBN3oC3U~If&;JO!|NNYFWvZTKU!L47jiUQq zVrOavZbJB5rvkhz+El!ZoS@Zr$_^BcLrz*!kEYsp6HnEdScgJJE$+l9OO^z$J~z6Y zxr|?vAbL2pen`taQQ1?ul_H$AUtNoFv(7Q3GEdS1y@02vs_BJGB>?lWPAk8;4TRvs&4YLVbyrUvYR^7T3R8(9QDMcjshVRV4bx_lhHX3hego|2AIm18WP%{R23>YC9m6nC;bG8b)ibG;zSjBEV zo$WE*qEcsWaUB z%`Tv|h~Cd5amG!AN9r%IBxUbqt@pMC1rc)U`KH9^{U|bl^$~3pgz{C;&2(A~o?*V* z+#NxVPc)@FlP4|tG;VG!awGiyJrITx2rM%r0x<%-Hc}cMXSqAQ03W7_Bh7JR)TA>k z4NZG#EzRFOPH>Ggpor?b($G_SE6wD=x~~?sy!vk&xiV1`;&Fm1EoOgLPmD$^^ymql zkn;Tu&oHjlWq%jI7Oua_khIm)tihErFLhEZy`%!3ib6IjbQBuq<2?8k-WKc|B* z#3mh0oxc28?U#Shy-^f_aG#KPs6MfLd3Yxn0LUx1+CQ(;re3TE%CLveDxi!t*>e3; z8($i^^XU(gkQ*sT!;wSlLWV=CmH7(KZv*c?|5Cm#ZBT$&Bu(s3B9Ymxq8fIaS+=iD zzh2;0(iTY$epP`gt^b~mm7q zv`_=rQ{Shu>)+W;_W)ovrOZfU$hc~UguL~gHdVh)U^n`hb}===G*2UQZ|nSIW0^MrY*&9j8{(2q6T#weC;bzjY7%}p7$PU)CA zblSxy+nuPIVPu(`nl_KiN!hM(-4BrXpOwDY!FDF(OwUA5scuTsHi=3wd#}Uu!@||c zP#!Ap4wWX{4r6}%O%Fi_3Po|O60M-*{7w9-vp7oz7kk$@zDiQjf(?%Bien3(4A~(J z5z7iKxl&7acFv*ZsmIJcTC30vc*47pl5PwCcQhWoqta;)nlcQk@t2TDlI?{zncjpQ zYwfv{NA0)`z1lV0mj_y;>*u$U+bnZV?S(!yT_xZ04M(eQ%X!pdi+YX3)^wnzBEb=fXLWTFXi^McrUt#B*sTGJIy z3-eVv? zOdK%Y&%>IkzeC#p0eg|`ga7=LM)BVOpk=iP1dt?H;5hD-2TL(PXkNl@SNl3c)@TiB zLE@{}y6}JXpS~gvSAezqffOpo#nU4YN}vuBSpR@NyaCOvLpVY??}8FKjOe1MU7+1u zQOO&n)|BdZbJ%-aWcB}10!NvUGa*j?o&o&<{&1ov#^3{pX=>pN!J3xFLGtU9tziXX z4Ha{JhL;D#eG<3Cl?VX&B{>t@RVSi8BMJ}GVbUa&a%GoyIPgG5`{i|r)-BqkFNlbA zMp*%58mJV0*{WdvafL-`B>zO@atoEABglgI#6U3AX&0&)GN+~uL%bfNo8=alSYk;%jH=`_ONs( zilP8;(%E+3A>ZT+UmOS-y3)o!d&RL-y!JU9A-1=7UM5=W7gIFnbM5Bkb$NciT1B>f zmuCMNGJ7bFZNq^33qpjr+7X+Km~qsUobv_kqHq1h>G4jyXk%#%yN}*h+PwFv{X9iK zZz+8)Vab5@L)yh};fU50KiBxo)#W@j-ShL#F<|EjL>dL5hG5ZPE;jl2=y`r0@!bAJ z?T1(jN0dsF8_|?@oYU%%z4HeE`cHspoZJ_6Awx4MRLY6< zbHDqc(&Sa$R?1m@5RznSQq8v`ICWaqk=rh7F`uxs?vCI=ZQY8PA zE$Wmp{@4@bOP*>1WcC+hrc0D(_j8mV4Fu~~Mxwrk*@w7Rr-yzBm5?V8KLnioOaIYa z?!{_w|EK`Z(|hoQPjD3CGs1r`v{*ymy;6ZV`~_-F3jXOHlAmSElCJT5klU#?0Tb5u z0%i!8Liw486uLFAv^IM1Y-h1=pB;2i35CS4Utb>2jTPx%Je_^@7tHO{@|x3y5fwU= zyFUMNT+!!RSZNi#+2qQ}R$?Q6jYS?Ob z*!D8x_0{E-_hHV6WWe764w33Qbb8^`(a0Z%>W;kdjIN{eUYo_BJ(HG1b3h?9uV8qJ zmX5u5tewodNRP<Pb)h1{N13lL?kSy)tmgi5R|sBB+l=eJ%Mn-Ks#>GAwniTwd^U{K{p2X zz94sjKGR=cE+1pCDHS65SX;UsaTMxWfeHrP9o;5bQ!rT;{H{-dM$zA)4hhFuR; zSVU+nljWIyT+Ak`6I-%Y+^gNmq*nC*qYj$)?zBlzMA|m&>WJ7a zMN}~X`PV%BRcO$WFUSwK{_)_G7n$1c!%+Amyb?bvRPg~yNk7qNP!L_2mDm^fhtSe{ z8QP?W7z_#VNj+v!DElCE9Siqe19 z3v5Sn@jhht%=#Ave4xp6FF-<=;~4nMz0)Jy)$vK=mG?hF33A?N-3>{0$u2X&f5x1) z=SEAp&fUM1y0ybk6rPBPWxcNV zJbgTuM&{bW{V!$3wuVbR`PeU7=ziaDZeRYr%pX;iJb#G9T%_3Booh;N%v*i==jFfz z6%sSG9*eKP)l|spFCcn?7zF&ae70nEq%cAAI}t2>+tv~4tU2^TJn@{u%ItgyxLEFbH?BL4LF&!QH6 zBZbm7UPNFFK+)B57vI=Y-TxW-tF?=_oDkbDNFzMBB8r9!E!GE%$`b zOMQnF4+^fs2coknau>znnFI0Hui3dlkoE;5{HG~PhsRNOH|MsWv!VFETqwUp?OZm#_=66&X$ zvy6r{^y{O7sNB68Jr0{Nfn6d+l;z5TE(UrD1@{!hr&^Rd9h%Xg0{RS)t|LN10tBK> zPS1AG0dP-te5#bNlbyQjr+_b?6ikl~KMWr==Hqj*@WdR}m>d-Lo)SH$c&!2ewkP(> zLPB%|%Q>QtQ^(TwcDG%yXHCZw?SSeC#j)PjGz_#X|8M?zsS5{HN|EMAXRTL@w*WCG z!zaANxVK!yDpU4eWu<5t}Lc^Z-T!hC6dZJL`Wc~O3PBz0&4!6hXxO&Q? zqaA!Ofhs%YCn6rSv!_g-MDc}_*Xrdi2fVU)i6UU+p$1@%M`LgDgwoE17KXm>3M=eBe3uy0#v9IHTwJ(RT29W~ z-D#x}Jpp4$U>Pj!8LJhirCZU|+|E=^8>Me*^NhEA=|K+V?Cg@OvK%dr>u)tmB z15M?Jqy`bRzl^>GX|=WZ6m=zDJ#Z!p)7qCg`@C1I=1*C9#}`|N1ObQT!f_^674hj( zS#d3im)nzml-24JpZP_YYif54HaoP2nN3IZi>1#k=qFsFeJdVp3!;X-fbip8w(@ z5b8YgB0)~%JP-?lG^!AV(3K9VM*kQRlJD+qgv)Uy2d{utnKvV`=B4Y|ITtwL(<2qcG42sf(36oLuLG115AMHq$z*oVqeChlEOJ&R@*h6oSP)2stN+1Pm<3 z1E|8HDASzDH%Ltc*AONJ(#p5y?`hz}VGw`=&UX*29%{^85rD1Tw>D6OBpkL1y#?Se zOZb7iVDF=U06@r>-F9X4j^Bwl?bVU}O?!?~(F61r;38sR#{!yz^4KzcF84dAM%Zvr zoxg^r!hg(@0?n-_+Y1L`Ek#oqb^HW#!6<#b2Y@gBDwe#D_KDX6#py@4m2xjODz^4J zux|mo3qr+>fu_9?A2sfSG%|cRDqn#+XUagTkqcEExSxDiq>2ehXdhZ1xn11&=K7=Gi3BZ|C9Xng*}373(^v`$ z8rtwl7P-#88>q)afG-IfqgkW{J%+XgKD(0!9!f0yM;kFeSTUWK@OBg8(Gey%mRw}s zk6R=MfymZeptb}E51R1DmhXu`M^d1=UtJTAxtJt%vB1nh*~!G(ZO=E8x0HMj~_+m4)?Q}|3O%3HsE33Cieq5K)F;h+m;f&*0 zup+?!J5N%Tz@(_gFJ?4hvFLz6l94s|S#S3%6-7gH&6ON@dYg(CTdA^!RzmMbt_Zb| z!fCCp46r=R5Fs8LWUN{9*&_d4&B&czxRup6BtP@Ju`ftcWD=q@qMqp%AbG0eGG{}o znw-~7q3`2>XZNX+NJMaJQkrEsTKtRbXy27OxUNfF{9xL z7F>N*DsKD{KO*!&+BQ#+UoGF!Lu>b#X$_%AqU#t?nFE78-~8~?EO?+xsP4I)NXZ}$}-eWty1>J zb_fR7&ZKC{(csXwJvcBDg^-b{u32_Ic4qYn4E6yFb1tRPCr<}w&XN4Frpl!giaJu2 z6FLL1$>`e~J8Bdp6Gu0LR5FWdW2qo3yEiC%JH)lb1cGqgbEg z%r#jKNz55dj4bTQ_~K$Lg_XtyEhcBb$-o88NeDSvZUghPgM)>5azYU6hi0B}?c70R z-Ml=^8-xLtRN@f<^V3mfvCGT#JqIq9q_C3(8VcN_1f$TWv$zu}B6^gq}@ z2ErqY%fBWB$=w0wZHO}Dp@ip%waOmH$ZT9D`R=GbCKavE(*I0-lmneJ}htL?#4x;$swQx>)1`OLZJTG(xuF`)j?G zt#h1H78Zk*Qf$y`_}F+Fz~RM}#6t#cZuH931_Pzfx+Y#^nQD1bBQ3F6omv_&spM8kFYBnm zldz*%S=77O826X$(}JGVRPp$#d=RgZNr4ZQ_IfKRiqCClw|R#lmRb{(M!Gk3QD3w> zHw2>z>0yqnyeG^L*}g^PNI2kNq`tB@q;7L@ch4RBQ~+%?0wYpnf$)t`QsRRXwRC6# zTYq#u^;v(gqioJ8$C#$37D>`QoY?s0l_IGYFWcx;d2wrQ;^I(hk9Mmwr9{G{B$Z;7 zo94>asb^+<{&3yW6d{>U6)nNmU0!flUK;zei2kvRFPZo zHE4AWSCE9tX?W9loj;eV#szBk7%wXh1Nn9Qd8-1#s_t1hPc7&7URFu^SE^e$pg5ky4v$J8qh0MD#g_HO3CTEpAF( z=Y+Cd9m0*`z|XfKza_#}rSo!{a__69o0mW?`K;uQ85RY|Uz4Y+5SECjYb8G(_K~SB z<)BZExo>)JOLV0}Mx0)=q;f#OTVVhzMyu}wmKujp+zDGcdPEi9;>ezqDstuAf}NvL zuV3&KMttU9$rWAcQpFVOa?J;PTkn&&WZYFZo2_M=uRUTgWEQx)G7OhnpI4o8yoJU>FR$yR9Vt7tG`chp?l9uUoGT8u4e4IwMD(X z0edm2*28vsX;@%ZBUht5G%)cC@DptVtDIWjfI)b+53Circ2;7=?*YhXtQAK#XT0xT zo``0Q93lo2b+r9*9DkGLsRwM?rG!O{Z+Nm?u?2$0Z^?z7vuM#anFKu6d zpn1P}M}5cAwIi=_7OVs6}jd^9~J zC#R#MJ5X5wo1w&=+v<$%9ad-M&scsZC61yvR#6;!QPV*Qbq5#Tb+0E*+EbQJc}H(} zUcF6W^+`w`rrXe&T{Pz@ZJ$lDb`@K?HXk|R`z=Ugn_TpOn7pTjl32hhS48mQ^@VQs z+@~D<$kfV(IHW~}clLz?E!u1j@83$G%i0j)P3kS9cwV;5*{6#`tvF@GS1xmRHmp^{8gD6-J%X}*tzwn zp!1S-)8(~36>|Xt%TJ%`#M@R0S~??cHD%ZJUR=5UXLZ8JuNtdV;ykRc8SeuWp!fR9 zV5Pg=a=)m)+%nVai~N`jYUSkQr@cIPZ^;!-yctE)e$t;-$x#*E13)y71=%cev! zVlOd|)KcqO^wNkRlpG6fL{wG2x{&s*rj`Lx)w?5yM#kLCGt{oOvV?4qC1_+M0~o=0 z6wf4!lE9{nXE@)Un|WCwaJX}IH8R5t#&@&6O(K~B_YRwSB>%or`5t?v)O2+0)q|D+ zU$vZTiv|Lv>#5SoMzc<08Vba_WSlwIxVAj@7D+MnE-bphIUQnWncFWqw2{9zEzc*( zm>Vv7KWK96GDFCgmiX)tX-Au9+*ayH5>iInGkiM3ll{$ps}WFH@+j#-td`~D(&wTf zWmE5#+hjy(ysh(-gmf%Bg(7j1KNZ`>1{~)kB5DWm7N%C=ixo;xKwwq|ZZ0!8ELj_L z&ZcTd7nfzGg&ZfLD$1fv^yJ&=Ed~!_$IDy<8%p(HliW{P=JvG@LuU|Ewq(r4_>}=d z7Cr)_ydpnDXn55baaiLf8p5}>HPGBC{y}>cO^S)|12V4j)e^P8jBK^!tl;bSETW5+ zWMoH{maKpKJn085_6RzV(fk^k9m(7Qg!uH5?^oJWAi$YV}@uS zF6Q)F1Lk_X41sri9TMUY-eYRX63kx`A_K%t>_*6`*fUxW;+>UC1Y1|G;KNUCxinL` zb-FX-y^!Pi#QoMeY0?gjWVfovJCXd-yaG^>S?^|fYdz&PKqhD9#8uN^X{BNvG-7c3 zMvop&*Opn_S~>5dsa*GxaG!W36g7F-0q%*YSH!(q8!dCUFY1CE!^<3bCN!D8fEh_p zF(1UVZahO|3N)+z8So+&wlE$p(A>ZyIXwGfgT7Ca4n`pjZp^CfVC@mPfndfW#0EvP zY3*PD^Zo(1%FY~8jEtN<=PSb5x{U||49epooLxLc(b;MC*bU7>IW}QrCX_z~KYe(; zWs~}93wk%@s5*=z#ECJBFM-{8Bt>nmMOjP3X=g(8$&^WXQzAmzrs@E^wXb?{HXevI>A(Jba{N1|ePy8|41&>Xx?+ikrDbXy z8?Yd%Y!QAwMbI%~HsGnN_Bv{|o&7Fv(@P!e;{iqMZVL`VAR*u8)eZyiyVjqwaIe-` zS-4xk7rUH@N*zTC`oRQt+U#f|^%=NTh@7+d_5?pBSOL zCyaiowakt(Z{$R@-UZ4zjccz6QgEptJ0A@5sk#|fpkO%V19_{<8iKRY#s>1IgK?+kk3%7Szp7Y8SRuy5&Q=_n zvf5N^@PlpTd6(|bEogTX2{#pEW9ECx5=y+t$$Qi^{p4K1u zb6_D_pb-uo0P9k{<~EK}(s43sT0JZI=0}R6GM@6(kd1{G&?ylaskw^vs17zgc1V22 zmTOMPbb-1?^8C?TdH`_|Us18NmBU6z(XDr~wH6;zcu{^n)o~=n*RAdpoMEl@EzJ6d zN2Nu17ZKThVo1D3XV;PC+_^ZbyG68^$X;^_5g~Zd_OQG6MLPk>pXvJ+dsPMYm<}VI^zgcjj^`lI>u;T$s>%u{5YV^SB2Sh&oZL6CN@C62m*{^;ke~3tnDA zk~a%*P7MACB>_|D{)JGefWVeK}N8d&(y3g zZ`K|P2;k0gN7Tr`&o6$A(fi~suI9xRWs-{1&LMu8)|Cs*SZyw?Yx6Sfn&X??_Wj6U zXqwyYba9)KvYe3fnXo~m1o`czP}XQPnAT6O`+dRFKWUsLU*j*EVO!#Ok@9FePC8f7 zsr86WTgA=Lm-lF3C=FxJ&jJstt92|bhhjP;nVm|5#?$p@mtsw&Om_#Y|6=Hoy2o10 z2Llh#C8-KQ1XXm^V=Mwvwm>(kzii#wM{x3kkW)uGleaNES26HWh~*tm(Zg{`&EhTc z2QyXOqpC?HPflx9)6K&tu=1Xhn`IhV9h}r(8C{C0=n7Ed@4x@x1yQe%(e57*9WZd> zr=(iR4|fUy*AammEU;X~xxHK|jAA(n_cMu2AA1L#0zZGKv(&1*+H7#rD=-a35PsH~ey+l;1)0b)9G zXzx}tT3rUBkt7>l2ps#}_RZUaugN*Bsn98UHg|o8>$DMd?SyX#9jqH=9Gc7Mt{J`E zgnvsGz+t$PH}gQV_#mfl#e45ZpMjVY7jCw1Y%yFg(-VF_sJ^ea7+d#i6@GE4zw zJO=kXe<2w;iAjsop9h*y_Mc3|N);)zD0-{cJ*s{Ch)v~FgG`;Mo@tCn<{l<6k7Kvp zd!!lzHSiWro#C2)3v2IPByiD~95FM2B8C;(6XHFBm)KSe;zWfDzc-bWCq=+ANVE9jbbMkCTSQ2xagmMK zdqzl|*!+wY17`+4(cZTtmXY6_uM_nhh}Q=$O@pf&a8s%Vj@4$Dk(=-@_VFi>**-Qh z6}Q{K?tsEqF8ZWL^~3xoIp#hQ0Dv=lUreMZ3b90DT+0U`*4)g+00P^yEJfNYpy&^} zBE=0zk}x^&9nEx&VXfty+q`@X{o>;~&$nQK=My}4Nn}~l#z;BL-W--x(v2knra4k_ zd=ohl^!jlK)6G4<0Qj&{xpT6Ym(t$)aIJS%Zk_7-x2fs7(;ox8SJFTjpcPW37!UR6OltaCWuwJh^-%ZPGfU`WqCN{9C zk1{qWweIx>FDkxngX5Hyoh7&jK{-FsO|HT3NJHqm$U4+w0RVM#%JbNj5z_h?9$#w; z$@(Z?LxBmr#aR#M>Dq~OVuV=dJe<`m;(8z}DV24=>^!u)@;knSZL@8Xb=PaM@l1Z; zSSFaQwcJ-iRt9(BKA@vyN4xM~fi|$%vpq?gDnI)BNkv|ORc~Cz4@cL=GM|N76 zkkGC9^-!6-vkTTSWl*)#_I_T!#KO|ExX3R$!P$OyE0Gn>R)M<$mTkCin%4R{kwp+ZDo< zu@Zs~_UgD=4%zji8uD{%jul^BENm4fCmxIKXurXj$oKl(GWAf~UJ>pQaUkC7vPZ<8 z@p``iE#}{;HFrqebX3)b|GDY;C472);OHn`na(hw`iW+zVCN4~phN5Yt+S<8x4ruB z&&Pu%@bJ5t&%ZWAX%2=BTm@H(9WnM4YxZ`o;c9tg*AHtb&aLqp1Z&nEt)wT;a2}Ak z!33urEjzLwqT%NJf#ie(p;2*ik^||+CzV9t84ww3efcy-~4QI?GA_3GLXZa~JTAarCh# zHgfzi6Z_%Bv3JvK%PCRFq;`a}x@3z*W44N*gfXQ;xI&rhVStax;JW2!@7rFp4#JsF zntoxd1U)*4fHcCb7d>5o_xS`;Dcp>kU+#$-8DBm-o%oTzu3QtxrR%} zoLmNuQP)*ubE)ckn#`3~O^R08qvfQUMto|sldHxiV(rygT)s=J=@UPTCWzQqX$?yw z9xO7(Gi3@O$8*{7a&YQj=Q-!Fecm~{9?x>xl>Gywf6*m5(Q2S5wvG zR^{O^xS62!OjGS`$J55NOed3x*I*_4964??UTgH*%j*Vpo1rZ1=jA-mEIsPo$CmIh zSj>FUt!eb_k%S3P*2uwHg=e$Jr>EEreXmcA2<`gQ6AS*ubg+dX@A+Nu3=cMokXv#? zebqFuGPC6Hpeg&pBp`hLEcxta=6tMR+p*9(5>~w$heuM3MmTRj7NaVfH5&_6 z3dcv{J`!GDybqoZif20OkJ^)^N)5_SQX?e=B_=3)X1iGKv&O5dq?)IN?X?&&{hQEl zxRt_WjVVsU0d<+%D++AYl5hdYEgKr_ZvJfdu-Er#u;@Bo=N1cSzZ++T#b<+o^3eMvU^ZOzsjPN6ql0#M6gU3JHa&QJoXZ3mGme&Nk*2j7 ztnV3eEMtHSaYfblu*^m8y^vWaGOzhb7hf9b8R;AOr%Z4k+^#dz8>VzdryG1QLzH>L zh)Au#YY&}evBnGUGSF2_bRrB9^^7rlmP$4o;L#*_n6&f}X{JffY0CFmAQCZpC-P#* z)Gm<{mN>C6XkIhG5?PpfKw<>r<+}yU+kyYHNNP+(P>)(gr1xwhS)#V}3%^$}W!2Cd zWjdk2V^okHMlkX>QcWg|yT4oB}Jy3i4CTmV`>Pa3*Kb3B3K=O~Q znK`1&m^8osds}C&b)uVWpWIony9wT$2E@=3R0AvgBmT)qc^QEj2TCOtr`yAh#xMCN oTyeD(rEadZ|6hG}3p;=LJgL1x*_l&^-%yYiSAZA3di&4+03J!KJOBUy literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/windows-defender-application-control/images/wdac-intune-policy-authorization.png b/windows/security/threat-protection/windows-defender-application-control/images/wdac-intune-policy-authorization.png new file mode 100644 index 0000000000000000000000000000000000000000..d011fc440880b258b17def87c1db90915380d641 GIT binary patch literal 24116 zcmbTeby!qg{4WYhBf5C{v@uk z!Vmt1=%OMij!@c9wgtaIvJjIOLqI5xz`QX+hToeg$*D=ezY!c;|L61nbNm1P>3_Ly zd+hS#|KyXf2+An374gT&N4^>@?0#3u_7fyuvBk84|(LH@88F6 zw9?W9hKKSV%-Fc$qrFGzrqeWk!1jOpxA^Imp3%bdsK(hAtW|3OA_9V^Q)(sK1QHkt z0fAk>JFJc=;cS=F-WYZl^WouV-Ou_!f<5%G$p960Y6OJ99R%PL_~6f=Xz)*VYtWgD ze!X`>HxrcuY#jv7$+6XJ>|wT4=hI#kexju>pjmnoK2_>$Uq+q%w9m>x7=$yG`c`d* z-*2wIq&S&H*NQ`3Q15L}OojZZLUuL8y;Ohjm+^q);^go>E_{FkKpP~OxyzCEGMm9# zlc2M~2Bxk@XbLyIMW4(RZ{L^BH;mdf$**#|2GaQb4C6 zRMQDY8ZOPVNkW}EYAcq!^3k%2WJo)>F7F<}E^5C!03ANc1)2jaxs#(z8XTmqyba%+;8sB!cbVp@44?quO3{BUXlbZXP!IW1BFt*Pt>aC@v7cltOr zdu7a*n6xCRNOsC!PDv|}O9~!ky6P<1(Hc0H@aUDB_>f@PsoNh;5{5%yOer@Cv_;jY z1`qrXUkNLiW=Eyq%py^+tvM?3503i-DM9`k)?^}WCTz~Q&1qB4TDZ#K#LW{&zHU96 zrsJfx-i#v1I7A-PU8oBBqRp(tWglSbd}?#_mmuCWz|5*JT)-6MmWNtst2e8fJVJ1> z>K{Ih5+)ESpF_5YloMjV)AWV10Ih?qG*q4J%lZPU!Z8AzM2Erw%r=p;I^U(fBRy#0 z;;T`@&rnM&7h$lj2kDiR`M5IJr}CmDJM>J6Rwf+$yudB@w~Wb5y*hzapFk0b`vp!> zjkpR(t8ilq^y>!%j=6t15x})mYW0*H7uav7^Lsjip%`S-{o|QHq-anG^e$fBKvj8R zcz3)U>DCI}{bF!~E@6`&4ZCacb;uhd5S)U=kPV2~KrGfcLt@SZbfniET>Xl-5TM2K z7TL>~^tsq@tYy5)wu?YcI`s2(&Rq&(~Ym%lu4?N#jaYGp66~7UHs4!Q~GS>Rl&Q$ zk{}_AZ`eDB^l^3_x&>6!!?Y=0ERE8xj}BsEm4;*L<%72~Y)CZ)r5#|wFB94Gi8xlI zTi~+^ly(UPbTH#STy`I20*YM}yap2AW|Nn%Tw`@Gv+6NfC-4sM? zQ_|pe5SU;j1D-u;8Y6;t;S00iFrMdH<9*Z$f1xjcYm}1=n+NeMIvYNG1wQh#>4}Y3 z;jK(dj0?d{sIT6z=5j*OsKBvaXIWjo!@N>(-KVh1_=AdQo_>#`Ghh89fnmb!-l9D# z^_mhr365@#+up-V^-FbDpBMH?%49G08(n*%`we>?wkIGlE;eZ&nnf4%x61Mt6+w44 zW2IizKilK3;Bo24muNvvd{fjR6!c%}$i#~AoZ5PW!#p+pS?*@aUCH49kE)O}zy@D! z!A{mo#EN=3kWIx4iFa(KV>QJz7g_O&ejEqk5z@aFn=xv$_$)`l!(~x(S&(;Sm@vhr z!B9o27-3hB01S8Plh(+X?AwyY{^x9TCbx8Hf{YGeC1JE#CfG^HOtkM2$w@cli$_N>GgS;fymU6tkM^v zVm=93)7ao5HQeh-0exA}3}iiCm)eQvH&qe2m9&H!q`?y{3d zjyx_dzQoq5h{9M0G|reZ-B|-*!B2|4yDE^fP)o-Ln6(tLZtyv)=GDfKxvZ(Hf1lwt zo@ulLxf%6B4jFAblH$qSY(W$FXdBjZX~%XE@Da=%4E*n2zW_Jg-&oJ&_b@HIs4m+c zRY&fHC2Xqf6sI!h#Fg8C#u7@fucA+netCpb-7vMLMRq7N4!o7UdnT7o)pJR=vED`j zv{obGPHn9LY=Z@(Eb~9;C5~y6z_sFy$jwwN*33;6yQ--KXY3tUaRkii7M#k`Em0lY z58pc#)Mm46ugus>fE*Lat4L*VqN)ig(JY?=*MkJ3RtI zlYqm*UDB<$*S+}?-LKg(n?3)mD=9LMACRi1k+YvPuGv7lr_aE#J-ww6anE}zaFtY$ zKX7k0UDL+)796W;39Z9?Q46QYSj6}zom3ERo4?HsyuZn+-YJZRjF*E_rd57fm8lrV zBto_Lcpwg8$KWdBx7AZa9?l^ohg~fVG6z>j8PwmaBS4$HS>zhnBb>&*7=4}?JKfn9 zQ~XhBI%ZC<;IX~E>6T}gd@Uk4onSrNtC2ivytE{Lqj>vDTvvVjyTr7nUiKWwiZrF` zCsK69q=BY!EX%56&c8p#nFU2(O5|UbcNj=s#Sdkth>9Q~bt*hYG}RU< z{nng>kAR?`!uHu`v?|H4Ox0OO58pojNE*tgvkhZC6{vac(ZQ%DlOs2;f2BQQ$2ij0 z_0sDsKBmypG&RG@!D6J(am~CHFjXc*A5K(c1|ugg)jfhDnkkQIC(LjfJ7WlJJim>4 zVrUC;u1rS@$af=paB#45eJYCYs~$5};s>c&>h?#{VV0GV=7nxu?A5MzRB1gq*-5;{ ztTB<>#kpi-pCsYR~V zxr^Wm%4%sJ*_OIH9}lj>bELB09xi%|x97EN84H%Z`DF_YPdW31o}0X!fBh+8N7yQ@ zy>Rlu>3iC>W}oeJ`N8*( z&@)lr-PSp=Gtu5vsKX!pz`q#92i&JAZTo!rWb`!>&QnA28_s6(eYKH;DRI13yBF|Q z?EYDI+4Sylm*#Eg__&C5loEh*T*}8VA7A8xmFT49@}UgdGq)& z^?L7Dgx^vQX}%Dm&)Dp595PjQFu0?ubp3jT+Qbm>hu~trHD&?%X3QOa;i2;sg}n>1 z=sS)BSMS}-#CTD=;+8VP4htP*b34H1QviK6_b8xmcQ|n;R>R&E# zKo$fz-}tRM4c+>sX3tJthbe#jGhlz>&&AQWD-Z8Wn9lLpn&hbM_5L|_&PC;5-EMJ1 z;yRu8r7Sw|L*qf`9^X=^8yC)U^X0JL!k>Tuf8F{;Y}RZmu+R>L4T@otXVL;=7Pl8$ zOUp@%kpy#*uEjIGq~=;1get3=*{!dAEG%+EFf=ok zrxV&bJ#*XU3IPl2IjJnI2J<`%^3-XmBDE84jXY3%bG+y^zUEn(*1!2xKtA*#Y(}DR zacU^X_V3!pd|!#f4~k3FL2#q9W3&pxu9{Nmy!G*)A`kPJwHaBirj>G=D^5Ie~? zw@I6a>e#mUyzlG)j9oJE$f{`B6)6L$}}2hwVmLE`22YmMU<;?whS zub7UM)leG%gyw=ntKiU3Qr4;R{vKq%SB0>|#$=DQ38&g2-P*E($?h*sAVEyca^lki zW=)qN7X{J^8Qr?#z7#_Nn%pm~6P9w&JV&*cu#}^09Rm`V>0+bBPeGEf0Qhk2&6h`I zL7YHVy*OZ{hP8B`>TGNwU zhYKq69><}3!@Q!bL${EJOjpX&lK;3*AyfEnjqNM(kO-PVp|sN008mHsvb12$2d{~7 ztTVSa@4k?TBTQ;nN4k9IW_ol~o1L1;=|f25*+=3Vff@|}K)i`|=-KeEx-&~vM}o|= z$%R3Le7xo zqApHzK4OLpHMS?cE%y_r5KcAk$;1}x+~OiRzwN}u|uDSDpdbffvZ!qPZt%Ea1?BWHYy&qwhmcz1zq)k}-U zhOo>;fF^tyq5gvF{4FXm9%V^3xwvE20K{k@tyqqFxzpK9uzQJX!cs}nJFq+YneTBIzj?8cI zsFDI+G@0!i{eZmHa?vDkRsw(fl9!|GY1Tb56xp?2U9`2MK)(KQB)u8@n`t+=au`k> ziF|Zhx&*?+HM^Pmx+*MOwe#)Ewj7Ah#4{_G?cbUssyg|723?t-oix%Ifm4Sw2@me) z_CtcnEFO^)JAb$2t2!#1F+qUZ%U-Ws1^0%@UQq5j`;^LVLC%B?C?(Bx$)^Vf7*g5o zv?=d?RZy*9&V-j2ufy{813K=Wi1C|XbBpl((u-nIG$^uyMBcCbB;2r;UoISLjlyx?IN zpO5D~F(#ne?X9PvgX`%!>yEXb8Fl--KTB>&m5GyL@vI-CYt_|k1e<8s4+PSZd5QB4P1`!Uyy9swe(O0saUmUjcLD->H(Vxfj`iR-IWCE2X9n9KZLfI-4h84sjSNll50l7vsT6Cst)hg20Jxl;>m;d5jNd0Ss?p+CI|&s!u;J z3!yx@uYMEAHxZ%-Y=JL?)^=+5MFVaxkI&Q0uJ85-_6eDBZJdcRxf2;&g7|JuD; zOhV7Dc36f*#Cd+gS!m6;;Imya2;Xb=iXqufQbZ+NRwLoQD)HU!hZln z^#7sdU*-4X<=_YQz*>W+0SB6EC<;QQuodx}>(gsCZ@Rnd^Ya0=jjH&`J+`h4?l`}N zJi){Lfq|zEc2)_G{hlF6$}*I(4urQemlqSNqe{BG>t0WR5cK| zd+%K3JK2=5lYVkGTw(WyFLN9pOvb^!j1W!OA^LQ}Bde@_hv^V3?mKkdu-h@EWBI;; zP53od4KfaWHFY}#hyo@H%w0NmbUu$8IrQ+*38}?h-oXiL*}OQoVnY#0TFJK4kE)b3 z5bA;$5@}PR0H426Iq<4`j~(JqD-QXH4*qj!G%9^~_tilxly^BqBnTjh0p%l-Zo9t| zelCo-wjl2-b#W~?P8P&R#${ZFO*s;}DV7)c6)ZIMnSEL6JpdKRc#**(^dT?cZb9cV z@_^UVMN%B1`35?<-;pOfV)BNO<5QUDCu}2F)Dz%yu*v~3)bpoftL&g)(^kz>D*dON z%T$yi4I>2e+hi_hGhYp1%75D(f}6^*(d#>@U^_?dlbox(HA{8ADi` z6o$w!WC44kaSj9Rkb+w;j{=$V6Fg=7moUlU-5ZF<64+~-_@;&napNg492f45qd%~j zfzS>`gdBZa-q$YcKL3|mOEiEACU}U%wQel8-1!5NjRYox<}6|o!^1UU1RL<~yh8yw z73;s|;qc~-hZpX!d;h7zz{>vyPT-&p@)S*9>`U3yc7f{w!(R?FfrD`NyE-H{M_yE` zB3k?p8e=$`bkM$nFMd}58(bM^*_RDzkPSK@ILm%k^D5U2gW;YW`6P$80}=ZR{;7Wy zi4JRiKt4v{`=SHIAs*oUe#xVeex%gCknrmjhZHxz#;k^cMhL9y|k!H zjDb!z>DuvJyQ{<@{MRH9-sJlDfaA(jV!1Qb7&j_}a4?GytpnM8$VtK?$?*PLKz6cjQ`zBNu31PHh-9Q3<;sFgXUcXav zBz=UUFbAQ>1l0af_p+5;7G#oV+dyh`oA0{m<{?9@ov?dk5uXz;G!GhS=JJV$@{2N@Xek3G^${yw*3PCsaIs3M%M*Awus?b zP7;Ud`N+>xeYS(8*L+*roln{4xw-BTX4U>7M-#@U1gZ0J z_yJ$l2FybD7g~KkJuibm4Vdd+ryO{?mrkwoWA2YU4NKZ8$D`rE4%a( zC#C+Vv;7YbzXHl$f@WJ6&G^S4_uLnSC9t||d(6jO;CK!$O$sp>#cBSweVu1#bLHdeHv^RwR zJ&6Sj;6FV1pEl7CB85LmQ4PDelMV!AJbe@t9_KQ$cn~h4rPDXS0FuY>Kbl4k)TaS4 z00QyPF7QFwH|8R6d2r=O}UOt$lHEh2IiS><&BQ==p8~KePilWVHC+p6&XIdZYToBlB^-%f6T+)uSCt+QFC~ro4#r>jn)~gyNBd zCOpey4|8$EU6EUdKJ7uY`i?@n*tr;|}10@)vZQ?g?LRwkiwR9o$ zzZ0nMt$4t$0=yfEx&J0x-daix%a(!XK?sU)A;6(T zkqj}(v~CWw=^2;Oz)WOd5D>zTn7{C6!BsmBwBTiHaiJ`j!Nb;1I?^M5fUmRM*!>6* zc|M+&F~B-xs=jH%3qu5d`7jFczLXAG5b?VszDkA*;B)Ln_#r%trhod+G!os}UYEXt zJ(U6FG9oNa{fn^Qe`o5Kt{$XW#`oS9UQ7bWY6i6~?)_y=5uh;`Mv7Lh7;@1q{Cwk2 zujEUey-4^T=NtynVdlSWQoLrNDQM+Iu#6gts;F1I9$51I1-)zT_Pq&Dfcgq$fXcb~ zmbC6~y3@6vVxV=C3);WS{^kusBu;1Q0}F#wHui5+gs;OXXT@lG^$0<0Om~yhC_Kb0 z(Re$-C3QGNhtA$%o=yTU_QZknEd^KK{?!GGj1>MB2di%bMpY}z|4-viiC z!Kr-z=qPA?B!6ZbC$$S5OqNXE4oNVvQk1Tn6x1v=jT=T|#a7XY>)$Pj7MxM9!eJad z%SNljn)qb%0|v37R}{6G*4=-5&4Efs19LVQ@v@E9{zyw%NOA`BQvZu*9cirZXX$5y^J$m{&k@v$aT#pmR}@nSw1i@lI!_2`=3X$igH+vkGP zXU#}ZsHM1WU8rAeRR!Hj04b@a%QM%IlV?F|;n?Mltka08@bx8;v=|XU_j5#8;#lgK za=ey6ib_PuY z(x6JtV8Ck^bW>+3PIoOPaOX zXn7v9aLyk68Sp4sik@Tu?TT=PL6@Fp#R5-%he4VlNGt1PSxv|kBdj`BK$YUs!&7jYyC1;OcO|NE1s1058~`0+%w= zO1FjT?@5VjQ#;^QBF#XYXxgm?yjYa`2am^UU8qbi?##^B=oKR=@M!rnIA_fJFwwjx z*b;SP+c<+Lsx-I^t*@p^38qjrV##XDM^w(hC}7WXM%uRZXly}%HaAPo`t_8hN~6p) z%>1R1ruwO23(!yl={u%digCY0jY5N{6`PyD0fyZrSqoygX@dw$@zo09iDTT4VzDL zQt$J6oF@0atl+W5@VZLHV05~_o9K)_iUhcw$YcPD>?aZ;hieStNup5oKx^%Ot3m-J z@_JUIMiyH#mw&9ZktiP%%tvPF0(snW&0;t5yj=FU6zqs%J%?|dw@OUxLNjBQe};=q zF1}CLC;-&bmB_@a0{4tFy*>ceOy)SLJy7i_-io_I(@^-;%Df1$whs_X@|pNBA3Za? z-urxmgu@kdg7rl_nRmmVPHh*B`Y`8us(d}#tISWXp>~)*WdasW^?JE|*dzDDwAFsn zS9WPN8SN>TDH=v*#c?ajWV1OQV~tQ;x0lP~6xvAl#p0UrW-^E=VX}n=eVeZwJNr=| zT=`2VT4_f;IOor31alR-MIyIDznwx%nzqu4^jRof0~yKli1u^ z_~1J(lApgV=A$K@eEsGTZC?neM=HP@*_3%d{z9T(^Gkl^RxCh1gnuAXsdG)@%tp(x zEu+-Y!k;9`Ad^+u#`|xmGXgo1_w!J%CC4HTXXI#bb*H%0vhc@L^%IjQRxG5}IC%t= zv}O-uu#BB*pV7G;wFt-gvq`lA%)(W#emir{+s{vgOZ9Rp>I*s^m%;w^v5@;8*?=a^X|a zF+L9a;8Wq+H(L(VB}}Mp2Jbkp#u0X~ZocS$a`G?GT2L5~{+bU5(Pt+VQ&=5MZF4ff z#;2t_n^!x%+sYzp_eSunE#%*cu<&<4ijJhVvL_&2yw^rRp8X#^+f`kj{FwLP^;I*v z+Lzv97<^cNwRIWjnMQgC)gH+f^9h6aR#M6&Ob16#{@g8#RiJ7%f^GcG8CIYS#4lUh z`td4+{9&}AeU-d?rs{sq{uv0sGX$VMrc8ofjDFk*Ap2%W-3hk#$R76D104{u- z%@^SrDtr}7X$u?Y?X*ue+j2{t*3CrF0YdDy`pfI+iUfw z-6>`#_4o5ET|Pr_j>)0yvFvH-sfw3CDIk%>D4E@^j*@eMqz69(4@7H8q30IjU?`dyr@ql2_ z_2O|fu6hv>@8OJC&GVZf{x7bS9lw&&iTVEK^BcU>Yr!WsUA2Y=b|iDU!D_I}l-Q0~ zZHlkznW16Qyd_NirW-mTG5gX*K`W`erIyF9{jlUQA>?Wb#qYMgju$@0x#L#o2H!8? zf4xuhwT^0u`@B^>)|y!wtJyVSr|VpqA;wI|^8rx(GV|$5vaf2)#KsK?bG_Dhcerc8 zM7Ij99#6CyaV`B%@U!YdP^Q~>*q0o`db{D~6NwACVa^-dU5~Os9!!aA9a_(}qE}a| zY7G`qdnS`n+7>9`j{*FkFznqCO3!fD8&}M;@jNFWNGsO9h?nt&8Uu7K#p#9409{nZ z=!z97Sj~Y@y=urqn|L8Y?dp)_<Z~+h^MK-vQ8qU&G(;J}(EnX@gYcXy#YFePzG+jG6l4nPhj3A~}3`8y{ve9X8roV$*daaDDghMSoC+OWbLM+)^x=LFT z;*Ng*Y=SqpZ8z8q{g>#Bjh6boatz&~Z&csNbVm1o4rACF*X5cMSWvaLyZk(j6#rGZ zXFI<tbSwjNpFuNSb4Au7&Q83HWg%dm?;_?^NW; zqO9atu&$QId#6pC9XmFFz)LfTEYIrXdV9gW-r({NyU&0Bp!(}B@&Q;Jm~l_c>>TX0 zE%gWEbQXlD*6<7xV=rb>#061IJkryoRE9KUtZ0nas=^oLHPjG>^KM7@ z0T%?zV9#wb<1it(zy{-G?Z3bllHU9O3#?w%&j>i}t9Z+o|EyLurnkr3-jVx;NlRA6 z#^ESw*Ehz6D`Pg$otgmpwVL^gxz_osYc(aiEo$}1#0*~#&n7nu^@s5qafP74@((F~ zGhT^z32P3?r|PUaouSVPN8m068(J{H>j#En9WcGa82s!XGD5q}yQ13UwT;OV5Wh(E zeLe^-af@eVDZJ+|0RDTrq~DpUWvw2W7?9J#^|bjhUixmQzy6S*??MP(5(LLiIS{qV zjH`UTlPBg)+9cv{r&eH|j$iE+V5K+Lq40R+QBFRpAUPn|!(-`(tI50yIym09s&rt+ z9=Wf$3A>`ft=HKfE*@0LkHaLD4BPx1s3}bNl6d`$`U3wTt;ZN>Ud{8%VN?5JVTBW# zxU`-4!XQpAozr)*y2#5+N^5u9rt1yJ8)4ax5vAp)R{vpehTwi---Vw=)E|>qwu@kI z^F_4B2=~hpR=`tY0^`f0x&E_IHR1$t2VstoNo(!-e#wclW7?HYrcg6Mw^%5tvI$N_ zJCSR<+{=ppT?BV(0b2L#3Jp?yYtemkr3!dPWfK)}u+89;OS-s~OY5Lg`9tKd)Q~^* zsY;;%L5lCIU$@YjSu`lLl(}9AZ;zr+yGz+@O+~RjaX5Hiz2GXPwP#OmE)>g@rt;Cz z!g?>6rS(0Iu$Xf^gLgkXW~dIKA9mCK>*5@Rz<)~QN1_yh&P=9gJ=CN9&K#D#a?xxi zD)F{7s+9joJAJBj5cv-3`1m|142Ij^qGLs1Xo3D+#co|uzv*%BB5yCaHN8-u?72g++>(H0Tk0aIyg;~0+u(-c2 z8Q~xl>b10F?5dfK7}Z7>?=i=3I!cg4nbi=)$};(MUg6v#O!)n{YcZjo!=seJR?JCHZi^mM-E21BE4#*_69nMTLwB+k@I)CW+c%<9+O z9o$R4M_aQfXU!`Gsa2g(H1*$y96%Wk=1n_)(_kTNw%NuGRnH)3;VH!GCKZUv&?NHud}XHS4t_RS;d=P;+SwpBt0$9Focj?!Z!*~Xq)jn3IT!WZ!j+;D)(6bA{gUt;YZBMzC3@v2cHh|<8)Lx zvJ@6?mDbBnFj^q8&`n!ic!`ba(UQp;0Up%tmm9gB(5g)f947_(JPpY}Z#0KaF?(H|)b6lYW6=RPU-sP})QGQ#;L&pyil&n|oCJR*z289Qd%e{#nd4k8jY<6s&{$q>yXP<)6liBj| zDmUU!W*2y?T45J$il%FJcY|Iq!+KLTmNK!evi6+5KD3d)+1e*H5$jAlD(_T|@s zfcm&*SzkTWVy@pt>h6#6wfoy$co}cJNQgS00Z&Z>kgHFsAzEb{Oabyi%H~HiN45F)> zc4Q1p#0p=sRo5nHOSNd0ssMYS7$O<5gl1c0o>X`zZI^R;RpM-N%qj8b-pYBDi_B)k zHg)DT3=`@NOf6mb7=rLb+*RjR-keskVAb-a z{@5y;^iKQyUN>fU9!p6{=!b286;WvNkNj)3wT1wMs zg~UC%Eik^$St{{J3q=u z-vM33*C1ZMw}`WkOWIB-T?gfH$M_ctI2`B`Xr~CA{}!LQj`#ItemWcxh+RL3SsT?p z-xN>I1wS=swP8k?JJVbC@my(BRJGeHu;ZU)ATrS*C(qIPYFJBZw2W7(gPmK*k^DT^ zERK&f9+%3jP4`EUnbKKmXsojSw<+oum^2eKVTTsUgf;`iuX=#HGS#dfTm5}Bow3M5 zsy3(Oh28|~;=0CaF&bDS9MqGdtz{777H)2g$(eH{y0Sa-jyXy|;3nY;(7`LO8U zVtqcRv8u;7hw&_v7^z42j0|@qN(hOZ=h(E>L7MM&n)mnm94kC&YeXHe94VNOb!IN( z!`&$sKmTr-f4ZUw{dnwA{nuA^e*VNqn`qtF3{~KPc{|<$Zn_%2drp>%&JpoRhzew&{(l&9^eOlNKl!| zi*x;zEPHbpt^KB#J@y2@;5+ryEB;iE1B>o}+Udwj-Jwe>F$+9(Jo#|-mTc6Io8pcQ z%F{tGS?4zm;wh<={GN01=?1TqViIa9B%0Z&o_BxItZEdo@eC&^uZK2<%g}$mr_wRT zpN;)CsIsHN-EA&*k;E=zJ>NyHwqwi|<;Js>>HMBes%EVRP#@lnoRiY`{LKUlKRT9q z(Mh%&fOK(b!uuIs3eCg~+v9DJo#MXU0?TV(ORY1#sz(fFoc+*-;6QkRAM1_jKR3cn*g zrJpA%&-Vn|=+!QTTA+`w=9bthv&li;9vhbe%1r8mi}m7#YHI4CB}GCK$@f__;3GT* zHsqlMTPu|^y?TrY-;$!igk)kp6)$Zpr=z)eGG47g!x|aU=t^nNVC{YQ>41mB4su}V zcK^*B0o0P0r&eYV+?elrMvorNlbFcqC!0QR4Htv9N3Hn_Y4_+42kx zH+6VB{XPvCa!AAX$*=Pm*J4f}0FP-X>9|uzIl;NF{&Ww)X?xJY9n&ih>4Bk^V&P&t z)@=O<>B__ItO#$bLcV(Zpj_qY8(eZ-(uxL133y?Uo&CT1QQ8oHLln%8v{ekwGUptGU+U?OE{5&#hz6uowArT88B+5(0x59qr0XF}G7FXVpmT zMzKlhf0JfLcGCMrNY|h(;>P&PL1sRFbBTnprl$OZt6M4$mDXm|`@6i4GbtG*xVQ}7 zby6|Y;>ENT5_Q$wWTh~F@QWw#cyP2b zIR9&*;IYRHF&IiJ=LD?AlVmt_**@okr_&>fvnGyHWkx5BrYVxJ9?<4{|sy&Wl%y=x9=E*iKT3Tgnk zSnNc~%xq>R)LA$WQoxL2FKHAs-F0Fy#I&#NN0@gDMrnMqR8tB|f_E%|sjq6Jbmu6^Wblk?)$&}ptXV()=f z5oN^WL|K5b>8xD{#g>Nm>rGMlFI5UEiH&NKipZQ2PjUf%GV~5DDZ@E=@9KQq9f+eq z+5}EstQ!Q&GCo1W!STYozZ7XTwvt)e7geQ zr~nc$%%RoF;0>`*)D{6&q9F>RTyNI%Qzm7g{NlfE=MwI3bdo#Ilj4&eDmw_5R)TQ>8B1 z-FC~;EtzKat+8cap(;@f_gv2tg%cEpjHM!)%>h%JG85Oq-F5>ka$XxhZ?kCO%e(_a zJq3JXF&&vN5<5Q^IU3hwfHro~cHXTFLLQ8I99~M9)W-gj)>qwbd4sUdU}t=f~{Kr%$< z(JwB88H=jw&ay+ZGk%^0mnL>g)~i_KJuYg+P9^%wY&}NS$fNJ15d#Mnr1KpSC!Scz z{RY@=_XIzLr7%JQ>}dH2BhZwtnwW6|jHg2x6-Juh#P&L$q!DnTt7E7odB4`1q@Pq7c zxm=b~N}g_HZCPLryqSI8HqPAs?9QqPv{#dBqev9Pop^CQBqATMI`OoRwnd(%1R4IO zi51bI9hGy1JK62d&L${`IPJwXK({NZ}{gFrZum@tl{#$WQ3@BRrM?7HUQxtOAd*%`& zP=twOWo_$L_b$bCfrz{BE6&uX*X&!S}}8h;~c$()(;SyNzsw z^UG}P3^xR?PTw2r0WbS=7D+JdKl<5Dk${`nG9w|>%WIYx)9o%?+CY)IfDTJ7nOyD{ zS1T>hMWofZ-V1<9~2XU89{moZIgdeDuREOje zu-+*AAb{d3HIQ|i{oxIb*=H;?Sr9%1_%7)oh?Sjspz^&rJHik0MRDp-$lE}`z|s@o zc&Yb$s}2MN#UGkIeaaxRcF5y9dPMh1ATkvAC12bZ?P0cgtkgbDe86W!_^SrTkt7a| zSf7YEimY8pTlhUy57-Ssj)cpEAb93rMm`YpJRP0ra7rv~>)|=J#-X63A#8{f20;)K zWnWhRL4J>T?O96>8C@Z*ANOLVc~Qu5Bb%*ACr*ZA1|1G zC$oVlipq~~9sIoALEavIN(H|ElGnEio%Cd{<<(P|SdNC#s;wsbz%gQg&&Qx+v zg(!zNhw69v!}tC9yf|eMp%-$44j$62m%_rxM>BD|ek@mK@#|Q~S# z_A@SwawD#2+&7~CcoVC-d*|!(rTx={ADDd*f_b?QiRqty8>sS4k zfRTioy*>xb8MJ$Ibh?b)!8ZMcKF)@M_T{64H@p+F13vZ5pH2zcu-`B13WnYXFD3Z* zd;xDcALjEcvr2_?_BGJa=yh+Z=V~#Q;e^e6Vzj%Q%dApin@^^;ZfzO$$08tXb&v;U zm@xSsypkJ$_+-pAOn=)hcqvt{-(_*x+Qj{^6Gx~`;PUJ1U&^w zoqo>#m=4)AK`_*1H*NirUUy#ltsDsL4c5GIV1FUvNswm&tM+o-W%z>MQDQ1@0Y-Ks-|PSU;3Qnzrqt5qVjUzMn?pZP4aDl8iPo3roLl-5z9)@DUsSWE18 z_y$0!+SXY#y=ts5Kf4~`lr63QbbkCR&wUw@c(dPjz@PPJ;$`R2ikETaJWnd%$@pnb z(J#z9SvxyS()!gq4eiS}NVh~)#=*ErcLX)22Gqde+_PNgE3qze&7Og$f%J=0(8To` z?LLho;at*-GH&<8#yW|tX%&i@cfGX=e`beGYvUvbyCB+OGPYYIq6Iu-B^)P8zq_P6 z$DG`){dQ?i5*FGGk}YF;nx!N4vl(`8C!&uB@`w{yLv9xQRM`s$4P?!Gz03;}WJ(k1 z;sPqDuAB{zi78`whwG(mV<~s6S*~lth&HD0F3Q5IbFQz!csi_9Z*$!hJev_3K$^e( zXO!*o=e{F}E^(J3jp?~%--IoM<&_O9H0mK9NTts}PS_0ylGnCSu4KQM(v>Xe#>7|_ zLc=z>CZ?4MUa4C&P-{fDGG7v_Gi^iSgl1}%uHFbBH#m)K*8z8FOrK1z>KG3H#h&Nl zuExR=nV;t`Rj4IlZ%aX8DlAG&(hzTH&!%u}E-iacGU#rKpAq1pf~KdVFPOPvf5Q7120=J&4UhQ|nn7GIE`f{IWkA=#!HUwb&%R z#THlQMUEs2K+PX>lAM-KExHV%=^ND%c40dH<^3xJz@nLvlAMqTNOFgnm#r*_R zMyba#)0l;H+RNGDIT@!0R*9RNlYiq1<|<)I`s>hQHa)*H_7wDGyfKlP!U5?q4r*Z< zriOT_ks7UGVQzt$DFdpk<*Q*&0U!cJuM4TN15F#Lataxb^RJ{{K1bICt96Do{Q9M0 zZSDr?+w*3jRBJ91*NOZ|^4Y@hk+(Amo8kGb-<}i(+o|u#e>frOTNg4nlf9QEU!YcM z;MuCL!1bz2ZV2h^$8dZn4@cr`*_i*4}@2skq(X&PSEW# zc1JgS3hLu4TBKJ$(b?6vS8FBr&J_%~d8{|O4hab$9$3QFA@@9d;VXa2T)=ceThJAs zSh1GlTS%3vlo3^n*{z3x!M8b-W-&Y+H7D;I+Wa95#|QbAi;9X+RZ1gz$yAv`Jlc!TF6>Rj6}UMzt3Qz+biP zC_ojSt~9y)Gt*&-{Xaf}j>q;x}tyaf&OY7>q zoCp-1aG}$U4C8bt6&h~Gev_NUR^x7Qlz9`!dnsYEp^?kOP<^y|NA~WsCr(_@ zSvTpCPKn_83Yp(mnh63rS3Opk!T(dtb;dQ-EdBTZqBM=P&{T-@8X$D>krF9VLhmI4 z(tB?riUdedKtwu(B1n-MdhcBXX+e4s=^!d1a!>U4c<+bze!Rc;e9GCgXJ&V1XJ*f4 z=C6D*PTJ>q>ngHajcx|rTnN|B!!93+xc8+gw{Ne@C_{BF#(2s0pL}~zzoa*iD}tDQMb|emLGT~p09SMvzM%}{D>NI5C|!+)~(&ie^C7uK4RQKNvFH(Lf)$A zFAw!~T+!3Ni5M@Bqcnj4%SEL5}_9}YsNuX9JW=rvnXmzTGR;-f@0hP-W|=I{Y4(*RM<2U;}F zshfc=6_qPT$0d0URLO;((l61i&PZq8eJ`sus=oN(&6f>bQG$-l@jhN+aju>GU0dxa zN%U4XG{RO#-tP7YU+K6-??$@y*iVPShMx^IVLf}!h^?YHTJ9rAoDwACPEL@n*?s*i z@64G-$fD*t#@I1jp^`y1sa-qGA`WKPY2Y)v=zHbC{1}7Gq`~T(l9BEUyyYilqy4E1 z^E3Pj5W0Bk@9L{3??qVg{i#L0V)BuU*k{?FV_I}%ZYmDP`FL5?JBmg+=4YoC$r9f7 zMKHY3uxbe`5cta9&CF-VSV#ICanp}GEn;nfin%uiHns=_r9+-Jey zikL4Bcm`#)8gr2=SCq1lDi|LC^n`_Py(ucJ~{;g&_?HVbm7#|wbLw6HT^usUsgz+pv;zkdVYZkSZEgE)U}~@ z!v(V>ud?W82P$gzYpy}|ea+(WiSN%qd*XN7(Hn2~)>kn7H{B`TArsZMmCZ74(Gba~ z5@z&8O~}JuSzkdocO&Hl*Y$QD>Kb`|9g}HH+oS`w(6n=*KSCzcyf2)Ent1oTT+7b5 zaMQ^Y!osp4lX<++k{M6Q_Z0+!E^XJ?e7(XoA56G%ap#<0^N^{%ABlVvElpaFwlaGoW3FSR;*vJJy#(8KhLgqhMSYbc+g>X zG3P*&i#MQliGzvXz>6jANus{cpQkrTi*l+UmvGtnz6JMD!S|^^5S3D|?-m{CX-y6P zdhqF0!EV=1OT0JJE%+5v8T6Bsne2=xB0sC^c9~A&DH+##9^SN4YJWk4%eLwyz?#L* zgQ!Rmja(^F?PznL_OA7i1ZqJ$q-5O*eDeUQ)X%cZ5}O6OH=kJcqTC*OsC$e>TVA_I z9dY0rbQYL2yPDisYx<=+B&~{}bk%l1j@!Z2iBoFVR@e^@YmYEJD7w9Us$zdY2Bd1tfrhGDxmi_6d{Hw-vaKqbV&+>AJ$PFLkfKOI2}4 z?vtwD;Dv#CW4T+)LU`qnGND1VszWWj-a|$9iXuxXKe!K7`Uv(EHLsm$W(KXNwni!V zBm2DT6~AYREY2p;4QEc!;*xnVQ)B=VlpOg0TT&Cl_fI2J=*NOW=0m3{l?rO1#;d+^ zlM5zf$qh}uqDLoJA{yJ2*Js$PC0Ip$asC1BxqO z5ANl;%M9Lo6RH2>YDrn}%O=+Y_Ro2^=Eue-Ne^zZ{LzJOcD{_g(((A}-rV+G1~0=; zxJ%=q%OUJf)G#k2JZIGm2#Z@cs0cZ1FK8;g^6sKrd?xI8ZZ{?$`D>x=a3Uy12pF^{ zAaEck*}^7H-9|Q1Dv@j1jW=O8S#XQG8C}A&>VlP z(m-bOs5rOUAU{|_oHhd70Ho%Hty>}Ewfk{$Lui{)D|vcjp2_2*+fMxP*~>ywcQ6G( za0Jz65T?L7y(rajTu0{Maz)#lYTCg6AduxLJsJLb%EX|&OA%50jegbzDpW;+p#$

Mr`PVf&4%zxcXqdpnJ`K`9d(l%tC zi3B8X$LqOhe18h40Y|dK_=nIE&)DH8gOh#qyF79Dk`Bk^Dw4spr6rYM+t=qUpTM5z zC~U)V^EvbeG?luX2CgHw*F-~TFjHB73@;7DRK)WM$iwUNg$pO^tH>!AR@PqRlDw!l z%_tc3bX^qvqX=j314!f_6rIn zoV%2>=nVXe+!|odMFI8wRjV|+9Z*AZ711$Ggj72GH384pVEEL{GLoxnomK!)(=)@x z504*RIK+Kf;)bWo{V}{ss9ST{?jwjzXUKuc0xajB3Cl_UJbm2p5KQ)af-L)!UsK;w z?fgS8sw~cM#gb$^h2j^bVTmQxvHmnIvHA`J)?W;xE?WdkK_JLK!pvZW?Dzi~F%iQ_ z3)@7UnO7kEy2fx#R?<|zoS!i$l)S~&OiiT)`GsH7u~T1lUiV1Qc4UynLw~P%+8I9~ zxvs8m2OYf3(lV3TymMzA`ENgD%$QgdjnbHR{HbtYvKP4if=kU-BL$aL5r=mgxcZ4cWH1k7G?@$Mquz1A-sTTD36Bmc zZlrE_ruLwCEZs-AWD4Wh$%8Mx!YJf)xMu$!@(@EU-nsRWk*{w9x3np)UY>(1 z(~T-jJw`q4-rr)QMOLuiQF;G5!xpmOms?G?qU6wI4d)q_ ztp!*C1FDsDfjV9kF8#Jr;$y8H;EIgT2Yf9`sUr0q3}w4dcSEC4*xcb#`cWM+3rxYwAeT^W zr4PIOA(Z4mDBi)EsBEewCsq;in#Mi5~8#Wr@lZGG_!v z(h$j=fy_?+sQ-t??_ExZkrW_wcei3QgYWWU5#HVoiEq7cJYMSJCizy`EYZ;mU_(?F zr@h)v@G>kdHsV2G?j@XKzNhrx=kpSrWG#n#4l+fUZA!IGrwCL(FOQnm44Phv?YTa@ z_PJ>ijSn$aXNt?YziwOiy~aIAHx~kn#jX@`uN9fM6=gAV5O+2q`!0SmrkFu4#VXVN z-Uk(lPH^>P-~8t$y3_4qQ_pGwu~Gyl;j|Jy;br4F|8^EQ2N4az$BT}|t%x#%J96?7 zqXJxs7zt0V1Xc?8!Z+-5azL`DCKEO=!`=zZUlR=i1<�a;Nq!;QP|*?yHGO`>3WG zwW;DS@5_NDfL$USUYu4cTJX`P1_O%-zT3dIB-><)3lKI4(bKS&TC*C`9_eUJ z0OksUu(gQKHww0J2Ny8lse!#u*yz5U@XrR$-ApcG696s%3ftfRve~VV*==c*$qy)? zBTx}BF#SFB6n_H{<{|&vC_(-X|7Rz;Idmo|(K~~7Vm3Z85yJvV?(!Ht@y9|J%)AW^ zG+40y4;$XxS)@4mqMflKPLzT_`&uf_b6Eexr#r?%xvpsKU{!}Ax{8gYL>B374jtxC zB23Dn>WPS;RtGk+SCZIi4)}1Z)_-(%Ljk4(7V?~<{8 zA_GV5^p6do4>jtl-kg&_33d&G2wzc99VU-^mb>T;3Zj6cIuryL@MUxR^QF<6Vf}75 z5d!I^gm4jVWeeBN9;@GsX9iW#+n$s3SQRw^m)pJOA)Z^m)`qOYyH8d07GvmCZ=Y>n z5fmj+(HReIEsN&hSSdeEM^s|9SIj>1{$x$+-WZMuez*{~6(q-?rxc%{g{mt`E5bMD zP%{ctHs1tLY!N1DixDM8x#^1 zAK}%BuHr4u*>#$k#Hft&AE_A*ie9N|H^~|6opQMAWp{r4XPvk#zZ*D)D!b!LPb`;$y`V>my;${Fp18t(o85}k=a>^ zk8uL8vj6PCBQT}mS{3=WJycv&=(ER-<2g*NU&DKy=qP3!3>6rR(s;-tV*$Mxu~sc0 zd`MIWXpcSBAY0Rc#bdQewM*!O0_Pi(*_UxQ^uy_DbFRWT3j5Xky`)XtrzYCRGMK}{ zdqUR^tf#V0ty!S>r&@oFzvFPw|E$_&VmT>udF(w~83|x5wYNf;H<`;R^oyzx;);lh z6iv_9{hzYH_pL!3WbB4y&_GdIc6y_)747z5}$Hx8IquEMBXn~A@LFmDjOlJcmlg?l8n z7oJi)uBLb%YFD>Q&F55=2y4$gKMF@}eq)JI0Vljenpa;GYGM7iJYuq5y?g;yy#ub; zkb^o7WV{JJl64=^G2A+!cUgdc_NW7Ie1uil3NDM;*e_rIBZ701ucz=t z!S%-y5K=v8x;vZiJ2Uz-iGa-Rn38LoS4TxrYk8CIrC^79tLkA`a7ik^%X9c=CY0?k zjAH~dW-048e z@Bfo2VdY6jhOJU`mn1|euj=FdAF*6kH0dNb%3M0_nnyon#Tf-21v+$# zhl7n@{~T%yC7&@Weo>UZEL`y<8e3{4oRq4w74QOld_it(!}DGPy{i_|V?O0FfZ7L= zQWFz++aK-%eGMlI(olXHw{;4M3S|aTN^-5q&s?J`3KPwrh%H9X9%6WwFVRmU8hFTO z7=i6`7|nFxh~n4R9Fq)Pu|UPwQHG5^V`ytoW}MxR=5|pBb!Utezv2hmDR#m;hk?y|-C{VG zl3eO9#}FZ{YsI*5lmTZpqond@)f$YbQJ@XvxAx)gXMrgPU^E~znIF|-M5XTx zO6ra#>~&}ozanZS9}FsMwarV)@&k7ZbB#CSuAF(xd;)GjUzbn3qyQKVzvq{UME*Bd z>*j*l?FU{-72{YnYyP6snF%7Fgk>t|mDTnMB41iXZ0#T!ANi-GI#<13bVdA-5jQb7 zhV^A3#N#7C$=WT013!sxwSJTCL01<0(nJs;{SsCLpu_m#k}cxQM0khAP&;O>mPF;K zdc=W~W?6j9WnP(UO`i1E)lb<}0FDiWi95v9zJJK%+{yN|dm(}>8CfVI0j#Q4d+7l* zQzBX2brrqh31%ZTzpX=0q9x8KodxfaH@B$A9@CM5pw5aK#^%pK-|eqnL2adckMHo^G?XCQIL-JROdZm$Ppel0*& zF$lt>i0yrI*LkhD&7CO1d$tAOgaC~J5ugL#zyJUM literal 0 HcmV?d00001 From 6e24f16a61a8cb9ba0c9c440d940eed28eebe697 Mon Sep 17 00:00:00 2001 From: brbrahm <43386070+brbrahm@users.noreply.github.com> Date: Wed, 30 Oct 2019 11:47:06 -0700 Subject: [PATCH 3/6] Add sample policies to Win32 on S --- .../LOB-win32-apps-on-s.md | 135 ++++++++++++++++++ 1 file changed, 135 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md b/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md index e49ad2532e..bb2c943ce1 100644 --- a/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md +++ b/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md @@ -65,4 +65,139 @@ The basic process is to generate a catalog file for each app using Package Inspe > [!Note] Every time an app updates, you will need to deploy an updated catalog. Because of this, IT Pros should try to avoid using catalog files for applications that auto-update and direct users not to update applications on their own. +# Sample Policy +Below is a sample policy that allows kernel debuggers, PowerShell ISE, and Registry Editor. It also demonstrates how to specify your organization's code signing and policy signing certificates. +```xml + + + 10.0.0.0 + {2E07F7E4-194C-4D20-B7C9-6F44A6C5A234} + + {5951A96A-E0B5-4D3D-8FB8-3E5B61030784} + + {52671094-ACC6-43CF-AAF1-096DC69C1345} + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 0 + + + + Example Policy Name + + + + + Example-Policy-10.0.0.0 + + + + +``` +# Policy Removal +> [!Note] There is currently a policy deletion error, with a fix expected in the 2D update in late February 2020. Devices of users who are unenrolled will still have their WDAC policies removed. In the mentime, IT Pros are recommended to update their policy with the below 'empty' policy which makes no changes to S mode. +```xml + + + 10.0.0.1 + {2E07F7E4-194C-4D20-B7C9-6F44A6C5A234} + {5951A96A-E0B5-4D3D-8FB8-3E5B61030784} + {52671094-ACC6-43CF-AAF1-096DC69C1345} + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 0 + + + + Example Policy Name - Empty + + + + + Example-Policy-Empty-10.0.0.1 + + + + +``` From dbdd9bf4107cf00bfa0b87016a6057a91cdc3e79 Mon Sep 17 00:00:00 2001 From: brbrahm <43386070+brbrahm@users.noreply.github.com> Date: Wed, 30 Oct 2019 11:59:13 -0700 Subject: [PATCH 4/6] Example changes --- .../windows-defender-application-control/TOC.md | 2 ++ .../windows-defender-application-control/Temp.md | 0 2 files changed, 2 insertions(+) create mode 100644 windows/security/threat-protection/windows-defender-application-control/Temp.md diff --git a/windows/security/threat-protection/windows-defender-application-control/TOC.md b/windows/security/threat-protection/windows-defender-application-control/TOC.md index 32ae5637c6..76e497eb71 100644 --- a/windows/security/threat-protection/windows-defender-application-control/TOC.md +++ b/windows/security/threat-protection/windows-defender-application-control/TOC.md @@ -37,6 +37,8 @@ ### [Disable WDAC policies](disable-windows-defender-application-control-policies.md) ### [Device Guard and AppLocker](windows-defender-device-guard-and-applocker.md) ### [LOB Win32 Apps on S Mode](LOB-win32-apps-on-s.md) +### [temp](temp.md) + ## [AppLocker](applocker\applocker-overview.md) ### [Administer AppLocker](applocker\administer-applocker.md) diff --git a/windows/security/threat-protection/windows-defender-application-control/Temp.md b/windows/security/threat-protection/windows-defender-application-control/Temp.md new file mode 100644 index 0000000000..e69de29bb2 From 82135abeeed8e0d8b440c12c740fbc928daecaa3 Mon Sep 17 00:00:00 2001 From: brbrahm <43386070+brbrahm@users.noreply.github.com> Date: Wed, 30 Oct 2019 12:00:50 -0700 Subject: [PATCH 5/6] Reversing example changes --- .../windows-defender-application-control/TOC.md | 1 - .../windows-defender-application-control/Temp.md | 0 2 files changed, 1 deletion(-) delete mode 100644 windows/security/threat-protection/windows-defender-application-control/Temp.md diff --git a/windows/security/threat-protection/windows-defender-application-control/TOC.md b/windows/security/threat-protection/windows-defender-application-control/TOC.md index 76e497eb71..321aa58e14 100644 --- a/windows/security/threat-protection/windows-defender-application-control/TOC.md +++ b/windows/security/threat-protection/windows-defender-application-control/TOC.md @@ -37,7 +37,6 @@ ### [Disable WDAC policies](disable-windows-defender-application-control-policies.md) ### [Device Guard and AppLocker](windows-defender-device-guard-and-applocker.md) ### [LOB Win32 Apps on S Mode](LOB-win32-apps-on-s.md) -### [temp](temp.md) ## [AppLocker](applocker\applocker-overview.md) diff --git a/windows/security/threat-protection/windows-defender-application-control/Temp.md b/windows/security/threat-protection/windows-defender-application-control/Temp.md deleted file mode 100644 index e69de29bb2..0000000000 From 4a1474cd47478d8fe7183aa9a472d199fe5412a8 Mon Sep 17 00:00:00 2001 From: Thomas Raya Date: Wed, 30 Oct 2019 13:36:25 -0700 Subject: [PATCH 6/6] Corrected Block Quote Formatting --- .../LOB-win32-apps-on-s.md | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md b/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md index bb2c943ce1..bc499753a7 100644 --- a/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md +++ b/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md @@ -36,7 +36,8 @@ The general steps for expanding the S mode base policy on your devices are to ge Refer to [Deploy multiple Windows Defender Application Control Policies](deploy-multiple-windows-defender-application-control-policies.md) for guidance on creating supplemental policies and [Deploy Windows Defender Application Control policy rules and file rules](select-types-of-rules-to-create.md) to choose the right type of rules to create for your policy. - > [!Note] Policies which are supplementing the S mode base policy must use **-SupplementsBasePolicyID 5951A96A-E0B5-4D3D-8FB8-3E5B61030784**, as this is the S mode policy ID. + > [!Note] + > Policies which are supplementing the S mode base policy must use **-SupplementsBasePolicyID 5951A96A-E0B5-4D3D-8FB8-3E5B61030784**, as this is the S mode policy ID. 2. Sign policy Supplemental S mode policies must be digitally signed. To sign your policy, you can choose to use the Device Guard Signing Service or your organization's custom Public Key Infrastructure (PKI). Refer to [Use the Device Guard Signing Portal in the Microsoft Store for Business](use-device-guard-signing-portal-in-microsoft-store-for-business.md) for guidance on using DGSS and [Create a code signing cert for WDAC](create-code-signing-cert-for-windows-defender-application-control.md) for guidance on signing using an internal CA. @@ -49,7 +50,8 @@ The general steps for expanding the S mode base policy on your devices are to ge Upload the signed policy to Intune and assign it to user or device groups. Intune will generate tenant- and device- specific authorization tokens. Intune then deploys the corresponding authorization token and supplemental policy to each device in the assigned group. Together, these expand the S mode base policy on the device. -> [!Note] When updating your supplemental policy, ensure that the new version number is strictly greater than the previous one. Using the same version number is not allowed by Intune. Refer to [Set-CIPolicyVersion](https://docs.microsoft.com/powershell/module/configci/set-cipolicyversion?view=win10-ps) for information on setting the version number. +> [!Note] +> When updating your supplemental policy, ensure that the new version number is strictly greater than the previous one. Using the same version number is not allowed by Intune. Refer to [Set-CIPolicyVersion](https://docs.microsoft.com/powershell/module/configci/set-cipolicyversion?view=win10-ps) for information on setting the version number. # Standard Process for Deploying Apps through Intune ![Deploying Apps through Intune](images/wdac-intune-app-deployment.png) @@ -63,7 +65,8 @@ Instead of authorizing signers external to your organization, Intune has added n The basic process is to generate a catalog file for each app using Package Inspector, then sign the catalog files using the DGSS or a custom PKI. After that, IT Pros can use the standard Intune app deployment process outlined above. Refer to [Deploy catalog files to support Windows Defender Application Control](deploy-catalog-files-to-support-windows-defender-application-control.md) for more in-depth guidance on generating catalogs. -> [!Note] Every time an app updates, you will need to deploy an updated catalog. Because of this, IT Pros should try to avoid using catalog files for applications that auto-update and direct users not to update applications on their own. +> [!Note] +> Every time an app updates, you will need to deploy an updated catalog. Because of this, IT Pros should try to avoid using catalog files for applications that auto-update and direct users not to update applications on their own. # Sample Policy Below is a sample policy that allows kernel debuggers, PowerShell ISE, and Registry Editor. It also demonstrates how to specify your organization's code signing and policy signing certificates. @@ -149,7 +152,8 @@ Below is a sample policy that allows kernel debuggers, PowerShell ISE, and Regis ``` # Policy Removal -> [!Note] There is currently a policy deletion error, with a fix expected in the 2D update in late February 2020. Devices of users who are unenrolled will still have their WDAC policies removed. In the mentime, IT Pros are recommended to update their policy with the below 'empty' policy which makes no changes to S mode. +> [!Note] +> There is currently a policy deletion error, with a fix expected in the 2D update in late February 2020. Devices of users who are unenrolled will still have their WDAC policies removed. In the mentime, IT Pros are recommended to update their policy with the below 'empty' policy which makes no changes to S mode. ```xml