Merge branch 'main' into c4a0b803-3380-415b-b896-69d6fcea0eee_38

This commit is contained in:
Rebecca Agiewich
2025-02-24 14:57:20 -08:00
committed by GitHub
24 changed files with 28 additions and 28 deletions

View File

@ -3,7 +3,7 @@ title: Understand App Control script enforcement
description: App Control script enforcement
ms.manager: jsuther
ms.date: 09/11/2024
ms.topic: conceptual
ms.topic: concept-article
ms.localizationpriority: medium
---
@ -12,7 +12,7 @@ ms.localizationpriority: medium
[!INCLUDE [Feature availability note](../includes/feature-availability-note.md)]
> [!IMPORTANT]
> Option **11 Disabled:Script Enforcement** is not supported on **Windows Server 2016** or on **Windows 10 1607 LTSB** and should not be used on those platforms. Doing so will result in unexpected script enforcement behaviors.
> Option **11 Disabled:Script Enforcement** isn't supported on **Windows Server 2016** or on **Windows 10 1607 LTSB** and shouldn't be used on those platforms. Doing so will result in unexpected script enforcement behaviors.
## Script enforcement overview
@ -23,7 +23,7 @@ Validation for signed scripts is done using the [WinVerifyTrust API](/windows/wi
App Control shares the *AppLocker - MSI and Script* event log for all script enforcement events. Whenever a script host asks App Control if a script should be allowed, an event is logged with the answer App Control returned to the script host. For more information on App Control script enforcement events, see [Understanding App Control events](../operations/event-id-explanations.md#app-control-block-events-for-packaged-apps-msi-installers-scripts-and-com-objects).
> [!NOTE]
> When a script runs that is not allowed by policy, App Control raises an event indicating that the script was "blocked." However, the actual script enforcement behavior is handled by the script host and may not actually completely block the file from running.
> When a script runs that isn't allowed by policy, App Control raises an event indicating that the script was "blocked." However, the actual script enforcement behavior is handled by the script host and may not actually completely block the file from running.
>
> Also be aware that some script hosts may change how they behave even if an App Control policy is in audit mode only. You should review the script host specific information in this article and test thoroughly within your environment to ensure the scripts you need to run are working properly.

View File

@ -3,7 +3,7 @@ title: Understand App Control for Business policy rules and file rules
description: Learn how App Control policy rules and file rules can control your Windows 10 and Windows 11 computers.
ms.localizationpriority: medium
ms.date: 09/11/2024
ms.topic: conceptual
ms.topic: concept-article
---
# Understand App Control for Business policy rules and file rules

View File

@ -3,7 +3,7 @@ title: Understand App Control for Business policy design decisions
description: Understand App Control for Business policy design decisions.
ms.localizationpriority: medium
ms.date: 09/11/2024
ms.topic: conceptual
ms.topic: concept-article
---
# Understand App Control for Business policy design decisions

View File

@ -3,7 +3,7 @@ title: Understanding App Control for Business secure settings
description: Learn about secure settings in App Control for Business.
ms.localizationpriority: medium
ms.date: 09/11/2024
ms.topic: conceptual
ms.topic: concept-article
---
# Understanding App Control Policy Settings