From 7776acfdc185e7757beea64c481e923b03e8d7d5 Mon Sep 17 00:00:00 2001 From: Andreas Stenhall Date: Thu, 26 Sep 2019 15:33:11 +0200 Subject: [PATCH] Clarification that you cannot use the existing GPO to deploy multiple CIPolicies Clarification that you cannot use the existing GPO to deploy these CIPolicies. --- ...y-multiple-windows-defender-application-control-policies.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-application-control/deploy-multiple-windows-defender-application-control-policies.md b/windows/security/threat-protection/windows-defender-application-control/deploy-multiple-windows-defender-application-control-policies.md index 40326f9ba8..a9666168df 100644 --- a/windows/security/threat-protection/windows-defender-application-control/deploy-multiple-windows-defender-application-control-policies.md +++ b/windows/security/threat-protection/windows-defender-application-control/deploy-multiple-windows-defender-application-control-policies.md @@ -79,6 +79,9 @@ When merging, the policy type and ID of the leftmost/first policy specified is u ### Deploying policies +> [!NOTE] +> You cannot use the "Deploy Windows Defender Application Control" group policy setting to deploy multiple CI policies. You must by any mean copy the *.cip files, both the baseline and the supplemental ones, to C:\Windows\System32\CodeIntegrity\CiPolicies\Active. + In order to deploy policies using the new multiple policy format you will need to: 1. Ensure policies are copied to the right location