deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-13 05:47:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

PR blocking feedback

Browse Source
This commit is contained in:
Jordan Geurten 2023-06-13 16:04:36 -04:00
parent 4fca5ee907
commit 1e8eca32bf
3 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
windows/security/threat-protection/windows-defender-application-control/images/appid-DLL-rule-xml.png
View File

Binary file not shown.
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 45 KiB

After

Width:  |  Height:  |  Size: 21 KiB

BIN
windows/security/threat-protection/windows-defender-application-control/images/appid-DLL-rule.png
View File

Binary file not shown.
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 46 KiB

After

Width:  |  Height:  |  Size: 36 KiB

6
windows/security/threat-protection/windows-defender-application-control/operations/known-issues.md
View File

@ -105,9 +105,9 @@ If the AppId Tagging Policy wasn't built off the WDAC base templates or doesn't
If you can't allowlist the Windows signers, or build off the WDAC base templates, it is strongly recommended to add the following rule to your policies to improve the performance:
![Allow all DLLs in the policy.](../images/appid-DLL-rule.png)
:::image type="content" source="../images/appid-dll-rule.png" alt-text="Allow all dlls in the policy.":::
![Allow all DLLs in the XML policy.](../images/appid-DLL-rule-xml.png)
:::image type="content" source="../images/appid-dll-rule-xml.png" alt-text="Allow all dll files in the xml policy.":::
Since AppId Tagging policies evaluate but can't tag DLLs, this rule will short circuit DLL evaluation and improve evaluation performance.
Since AppId Tagging policies evaluate but can't tag dll files, this rule will short circuit dll evaluation and improve evaluation performance.