deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-13 05:47:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Updated SAC-recommended section per feedback

Browse Source
This commit is contained in:
Jordan Geurten 2022-09-23 12:54:41 -04:00
parent 9c42ffb8ba
commit c5e4881a7d
2 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md
View File

@ -1530,14 +1530,6 @@ Select the correct version of each .dll for the Windows release you plan to supp
> [!NOTE] > [!NOTE]
> To create a policy that works on both Windows 10, version 1803 and version 1809, you can create two different policies, or merge them into one broader policy. > To create a policy that works on both Windows 10, version 1803 and version 1809, you can create two different policies, or merge them into one broader policy.
## Smart App Control Considerations
Smart App Control enforces the Microsoft Recommended Block Rules above, with a few exceptions for compatibility considerations. The following are not blocked by Smart App Control:
- Infdefaultinstall.exe
- Microsoft.Build.dll
- Microsoft.Build.Framework.dll
- Wslhost.dll
## More information ## More information
- [Merge Windows Defender Application Control policies](merge-windows-defender-application-control-policies.md) - [Merge Windows Defender Application Control policies](merge-windows-defender-application-control-policies.md)

8
windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control.md
View File

@ -58,6 +58,14 @@ Smart App Control is only available on clean installation of Windows 11 version
| 1 | Enforce | | 1 | Enforce |
| 2 | Evaluation | | 2 | Evaluation |
### Smart App Control Enforced Blocks
Smart App Control enforces the [Microsoft Recommended Driver Block rules](microsoft-recommended-driver-block-rules.md) and the [Microsoft Recommended Block Rules](microsoft-recommended-block-rules.md), with a few exceptions for compatibility considerations. The following are not blocked by Smart App Control:
- Infdefaultinstall.exe
- Microsoft.Build.dll
- Microsoft.Build.Framework.dll
- Wslhost.dll
> [!IMPORTANT] > [!IMPORTANT]
> Once you turn Smart App Control off, it can't be turned on without resetting or reinstalling Windows. > Once you turn Smart App Control off, it can't be turned on without resetting or reinstalling Windows.