deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-18 08:17:23 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Add Output Parameters and Descriptors to CITool Commands

Browse Source
This commit is contained in:
valemieux 2023-06-15 14:43:07 -07:00
parent 597e3161ff
commit cfccb481db
1 changed files with 29 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
windows/security/threat-protection/windows-defender-application-control/operations/citool-commands.md
View File

@ -42,6 +42,35 @@ CiTool makes Windows Defender Application Control (WDAC) policy management easie
| --refresh | Attempt to Refresh WDAC Policies | -r |
| --help | Display the tool's help menu | -h |
## Output Parameters and Descriptions
1. List Policies
Policy:
Policy ID: d2bda982-ccf6-4344-ac5b-0b44427b6816
Base Policy ID: d2bda982-ccf6-4344-ac5b-0b44427b6816
Friendly Name: Microsoft Windows Driver Policy
Version: 2814751463178240
Platform Policy: true
Policy is Signed: true
Has File on Disk: false
Is Currently Enforced: true
Is Authorized: true
Status: 0
```
| Command | Description |
|--------|---------|
| Policy ID | The ID of the Policy listed in <PolicyID>
| Base Policy ID | The ID of the Base Policy listed in <BasePolicyID>
| Friendly Name | Value listed in <Setting Provider="PolicyInfo" Key="Information" ValueName="Name">
| Version | Version of the policy listed in <VersionEx>
| Platform Policy | Whether the policy is a policy provided by Microsoft (e.g. Vulnerable Driver blocklist policy)
| Policy is Signed | Whether the policy has a valid signature
| Has File on Disk | Whether the policy file is currently on the disk
| Is Currently Enforced | Whether the policy file is active
| Is Authorized | If the policy requires a token to be activated, it will return the state of authorization for the token. If the policy does not require a token, matches the state of Is Currently Enforced"
## Examples
1. Deploy a WDAC policy