From 45e0643b0f0c6ff686374139b9457cd002a7f579 Mon Sep 17 00:00:00 2001 From: Scott Brondel Date: Mon, 4 Apr 2022 13:30:02 -0500 Subject: [PATCH] Fix incorrect EFI mount code The $EFIDestinationFolder needs a top-level \EFI folder in the path, which was not present in that line. To avoid potential confusion by having a C:\EFI\EFI\... structure in $MountPoint, I also changed $MountPoint from C:\EFI to C:\EFIMount for clarity. --- .../deployment/deploy-wdac-policies-with-script.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/deployment/deploy-wdac-policies-with-script.md b/windows/security/threat-protection/windows-defender-application-control/deployment/deploy-wdac-policies-with-script.md index e7c5dca396..43ecea1845 100644 --- a/windows/security/threat-protection/windows-defender-application-control/deployment/deploy-wdac-policies-with-script.md +++ b/windows/security/threat-protection/windows-defender-application-control/deployment/deploy-wdac-policies-with-script.md @@ -85,8 +85,8 @@ In addition to the steps outlined above, the binary policy file must also be cop 1. Mount the EFI volume and make the directory, if it does not exist, in an elevated PowerShell prompt: ```powershell - $MountPoint = 'C:\EFI' - $EFIDestinationFolder = "$MountPoint\Microsoft\Boot\CiPolicies\Active" + $MountPoint = 'C:\EFIMount' + $EFIDestinationFolder = "$MountPoint\EFI\Microsoft\Boot\CiPolicies\Active" $EFIPartition = (Get-Partition | Where-Object IsSystem).AccessPaths[0] mountvol $MountPoint $EFIPartition mkdir $EFIDestinationFolder