mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-14 06:17:22 +00:00
revised planning topics
This commit is contained in:
parent
f10f5fd21b
commit
9c561bcf1c
@ -1,6 +1,6 @@
|
||||
---
|
||||
title: Create your Windows Defender Application Control (WDAC) planning document (Windows 10)
|
||||
description: This planning topic for the IT professional summarizes the information you need to research and include in your AppLocker planning document.
|
||||
description: This planning topic for the IT professional summarizes the information you need to research and include in your WDAC planning document.
|
||||
ms.assetid: 41e49644-baf4-4514-b089-88adae2d624e
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: deploy
|
||||
@ -25,8 +25,7 @@ The design process and the planning document help you investigate application us
|
||||
You should have completed these steps in the design and planning process:
|
||||
|
||||
1. [Select types of rules to create](select-types-of-rules-to-create.md)
|
||||
2. [Determine Group Policy structure and rule enforcement](determine-group-policy-structure-and-rule-enforcement.md)
|
||||
3. [Plan for WDAC policy management](document-your-windows-defender-application-control-management-processes.md)
|
||||
2. [Plan for WDAC policy management](document-your-windows-defender-application-control-management-processes.md)
|
||||
|
||||
### WDAC planning document contents
|
||||
|
||||
|
@ -1,6 +1,6 @@
|
||||
---
|
||||
title: Document your application control management processes (Windows 10)
|
||||
description: This planning topic describes the AppLocker policy maintenance information to record for your design document.
|
||||
description: This planning topic describes the WDAC policy maintenance information to record for your design document.
|
||||
ms.assetid: 6397f789-0e36-4933-9f86-f3f6489cf1fb
|
||||
ms.prod: w10
|
||||
ms.mktglfcycl: deploy
|
||||
@ -16,19 +16,16 @@ ms.date: 09/21/2017
|
||||
- Windows 10
|
||||
- Windows Server
|
||||
|
||||
This planning topic describes the AppLocker policy maintenance information to record for your design document.
|
||||
This planning topic describes the Windows Defender Application Control (WDAC) policy maintenance information to record for your design document.
|
||||
|
||||
## Record your findings
|
||||
|
||||
To complete this AppLocker planning document, you should first complete the following steps:
|
||||
To complete this planning document, you should first complete the following steps:
|
||||
|
||||
1. [Determine your application control objectives](determine-your-application-control-objectives.md)
|
||||
2. [Create a list of apps deployed to each business group](create-list-of-applications-deployed-to-each-business-group.md)
|
||||
3. [Select the types of rules to create](select-types-of-rules-to-create.md)
|
||||
4. [Determine the Group Policy structure and rule enforcement](determine-group-policy-structure-and-rule-enforcement.md)
|
||||
5. [Plan for AppLocker policy management](plan-for-applocker-policy-management.md)
|
||||
5. [Plan for AppLocker policy management](plan-windows-defender-application-control-management.md)
|
||||
|
||||
The three key areas to determine for AppLocker policy management are:
|
||||
The three key areas to determine for WDAC policy management are:
|
||||
|
||||
1. Support policy
|
||||
|
||||
@ -42,7 +39,7 @@ The three key areas to determine for AppLocker policy management are:
|
||||
|
||||
Detail how rules will be added to the policy, in which Group Policy Object (GPO) the rules should be defined, and how to modify rules when apps are retired, updated, or added.
|
||||
|
||||
The following table contains the added sample data that was collected when determining how to maintain and manage AppLocker policies.
|
||||
The following table contains the added sample data that was collected when determining how to maintain and manage WDAC policies.
|
||||
|
||||
<table style="width:100%;">
|
||||
<colgroup>
|
||||
@ -60,7 +57,7 @@ The following table contains the added sample data that was collected when deter
|
||||
<tr class="header">
|
||||
<th align="left">Business group</th>
|
||||
<th align="left">Organizational unit</th>
|
||||
<th align="left">Implement AppLocker?</th>
|
||||
<th align="left">Implement WDAC?</th>
|
||||
<th align="left">Apps</th>
|
||||
<th align="left">Installation path</th>
|
||||
<th align="left">Use default rule or define new rule condition</th>
|
||||
@ -101,7 +98,7 @@ The following table contains the added sample data that was collected when deter
|
||||
<td align="left"><p>C:\Program Files\Woodgrove\HR\Checkcut.exe</p></td>
|
||||
<td align="left"><p>File is signed; create a publisher condition</p></td>
|
||||
<td align="left"><p>Allow</p></td>
|
||||
<td align="left"><p>HR-AppLockerHRRules</p></td>
|
||||
<td align="left"><p>HR-WDACHRRules</p></td>
|
||||
<td align="left"><p>Web help</p></td>
|
||||
</tr>
|
||||
<tr class="even">
|
||||
@ -141,7 +138,7 @@ The following table contains the added sample data that was collected when deter
|
||||
</tbody>
|
||||
</table>
|
||||
|
||||
The following two tables illustrate examples of documenting considerations to maintain and manage AppLocker policies.
|
||||
The following two tables illustrate examples of documenting considerations to maintain and manage WDAC policies.
|
||||
|
||||
**Event processing policy**
|
||||
|
||||
|
@ -22,11 +22,10 @@ This guide covers design and planning for Windows Defender Application Control (
|
||||
|
||||
| Topic | Description |
|
||||
| - | - |
|
||||
| [Understand WDAC policy design decisions](understand-windows-defender-application-control-policy-design-decisions.md) | This topic for the IT professional lists the design questions, possible answers, and ramifications of the decisions when you plan a deployment of application control policies by using AppLocker within a Windows operating system environment. |
|
||||
| [Select the types of rules to create](select-types-of-rules-to-create.md) | This topic lists resources you can use when selecting your application control policy rules by using AppLocker. |
|
||||
| [Determine the Group Policy structure and rule enforcement](determine-group-policy-structure-and-rule-enforcement.md) | This overview topic describes the process to follow when you are planning to deploy AppLocker rules. |
|
||||
| [Plan for AppLocker policy management](plan-for-applocker-policy-management.md) | This topic for describes the decisions you need to make to establish the processes for managing and maintaining AppLocker policies. |
|
||||
| [Create your AppLocker planning document](create-your-applocker-planning-document.md) | This planning topic for the IT professional summarizes the information you need to research and include in your AppLocker planning document. |
|
||||
| [Understand WDAC policy design decisions](understand-windows-defender-application-control-policy-design-decisions.md) | This topic lists the design questions, possible answers, and ramifications of the decisions when you plan a deployment of application control policies. |
|
||||
| [Select the types of rules to create](select-types-of-rules-to-create.md) | This topic lists resources you can use when selecting your application control policy rules by using WDAC. |
|
||||
| [Plan for WDAC policy management](plan-windows-defender-application-control-management.md) | This topic describes the decisions you need to make to establish the processes for managing and maintaining WDAC policies. |
|
||||
| [Create your AppLocker planning document](create-your-windows-defender-application-control-planning-document.md) | This planning topic summarizes the information you need to research and include in your planning document. |
|
||||
|
||||
After careful design and detailed planning, the next step is to deploy AppLocker policies. [AppLocker Deployment Guide](applocker-policies-deployment-guide.md) covers the creation and testing of policies, deploying the enforcement setting, and managing and maintaining the policies.
|
||||
After planning is complete, the next step is to deploy WDAC. [Windows Defender Application Control Deployment Guide](windows-defender-application-control-deployment-guide.md) covers the creation and testing of policies, deploying the enforcement setting, and managing and maintaining the policies.
|
||||
|
Loading…
x
Reference in New Issue
Block a user