From 6e24f16a61a8cb9ba0c9c440d940eed28eebe697 Mon Sep 17 00:00:00 2001
From: brbrahm <43386070+brbrahm@users.noreply.github.com>
Date: Wed, 30 Oct 2019 11:47:06 -0700
Subject: [PATCH] Add sample policies to Win32 on S
---
.../LOB-win32-apps-on-s.md | 135 ++++++++++++++++++
1 file changed, 135 insertions(+)
diff --git a/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md b/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md
index e49ad2532e..bb2c943ce1 100644
--- a/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md
+++ b/windows/security/threat-protection/windows-defender-application-control/LOB-win32-apps-on-s.md
@@ -65,4 +65,139 @@ The basic process is to generate a catalog file for each app using Package Inspe
> [!Note] Every time an app updates, you will need to deploy an updated catalog. Because of this, IT Pros should try to avoid using catalog files for applications that auto-update and direct users not to update applications on their own.
+# Sample Policy
+Below is a sample policy that allows kernel debuggers, PowerShell ISE, and Registry Editor. It also demonstrates how to specify your organization's code signing and policy signing certificates.
+```xml
+
+
+ 10.0.0.0
+ {2E07F7E4-194C-4D20-B7C9-6F44A6C5A234}
+
+ {5951A96A-E0B5-4D3D-8FB8-3E5B61030784}
+
+ {52671094-ACC6-43CF-AAF1-096DC69C1345}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 0
+
+
+
+ Example Policy Name
+
+
+
+
+ Example-Policy-10.0.0.0
+
+
+
+
+```
+# Policy Removal
+> [!Note] There is currently a policy deletion error, with a fix expected in the 2D update in late February 2020. Devices of users who are unenrolled will still have their WDAC policies removed. In the mentime, IT Pros are recommended to update their policy with the below 'empty' policy which makes no changes to S mode.
+```xml
+
+
+ 10.0.0.1
+ {2E07F7E4-194C-4D20-B7C9-6F44A6C5A234}
+ {5951A96A-E0B5-4D3D-8FB8-3E5B61030784}
+ {52671094-ACC6-43CF-AAF1-096DC69C1345}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 0
+
+
+
+ Example Policy Name - Empty
+
+
+
+
+ Example-Policy-Empty-10.0.0.1
+
+
+
+
+```