deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-16 02:43:43 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Update citool-commands.md

Browse Source
This commit is contained in:
Vinay Pamnani
2022-10-03 15:22:21 -04:00
committed by GitHub
parent 22c922368f
commit 6bd03639df
1 changed files with 13 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
windows/security/threat-protection/windows-defender-application-control/citool-commands.md
View File

@ -12,27 +12,26 @@ ms.custom: template-how-to
# Manage Windows Defender Application Control (WDAC) Policies with CI Tool
CI Tool makes Windows Defender Application Control (WDAC) policy management easier for IT admins. CI Tool can be used to manage Windows Defender Application Control policies and CI Tokens.
This article will describe how to use CI Tool to update and manage policies. CI Tool is currently included in box in Windows 11 22H2.
CI Tool makes Windows Defender Application Control (WDAC) policy management easier for IT admins. CI Tool can be used to manage Windows Defender Application Control policies and CI Tokens. This article describes how to use CI Tool to update and manage policies. CI Tool is currently included in Windows 11, version 22H2.
## Policy Commands
| Command | Description | Alias |
|--------|---------|---------|
| --update-policy </Path/To/Policy/File> | Add or update a policy on the current system | -up |
| --remove-policy <PolicyGUID> | Remove a policy indicated by PolicyGUID from the system | -rp |
| --update-policy `</Path/To/Policy/File>` | Add or update a policy on the current system | -up |
| --remove-policy `<PolicyGUID>` | Remove a policy indicated by PolicyGUID from the system | -rp |
| --list-policies | Dump information about all policies on the system, whether they are active or not | -lp |
## Token Commands
| Command | Description | Alias |
|--------|---------|---------|
| --add-token <Path/To/Token/File> <--token-id ID> | Deploy a token onto the current system, with an optional specific ID. | -at |
| --remove-token <ID> | Remove a Token indicated by ID from the system. | -rt |
| --add-token `<Path/To/Token/File>` <--token-id ID> | Deploy a token onto the current system, with an optional specific ID. | -at |
| --remove-token `<ID>` | Remove a Token indicated by ID from the system. | -rt |
| --list-tokens | Dump information about all tokens on the system | -lt |
>[!NOTE]
>Regarding --add-token, if <ID> is specified, a pre-existing token with <ID> should not exist.
> [!NOTE]
> Regarding --add-token, if `<ID>` is specified, a pre-existing token with `<ID>` should not exist.
## Miscellaneous Commands
@ -53,12 +52,14 @@ This article will describe how to use CI Tool to update and manage policies. CI
```
2. Refresh the WDAC policies
```powershell
PS C:\Users\<USER> CITool --refresh
Operation Successful
```
3. Remove a specific WDAC policy by its policy ID
```powershell
PS C:\Users\<USER> CiTool --remove-policy "{BF61FE40-8929-4FDF-9EC2-F7A767717F0B}"
Operation Successful
@ -66,6 +67,7 @@ This article will describe how to use CI Tool to update and manage policies. CI
```
4. Display the help menu
```powershell
PS C:\Users\<USER> CITool -h