deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-23 14:23:38 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity
Files
26064136b46560e70f9e5012d543847cc49f53ce
windows-itpro-docs/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune.md
Bella Brahm df427631a3 Update WDAC metadata 
Updating WDAC docs metadata to reflect current ownership

author: jsuther1974
ms.reviewer: brbrahm
ms.author: dansimp
manager: dansimp
2019-10-24 16:17:47 -07:00

1.9 KiB
Raw Blame History

title, description, keywords, ms.assetid, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.localizationpriority, audience, ms.collection, author, ms.reviewer, ms.author, manager, ms.date
title description keywords ms.assetid ms.prod ms.mktglfcycl ms.sitesec ms.pagetype ms.localizationpriority audience ms.collection author ms.reviewer ms.author manager ms.date
Deploy Windows Defender Application Control (WDAC) policies by using Microsoft Intune (Windows 10) Windows Defender Application Control restricts which applications users are allowed to run and the code that runs in the system core. whitelisting, security, malware 8d6e0474-c475-411b-b095-1c61adb2bdbb w10 deploy library security medium ITPro M365-security-compliance jsuther1974 brbrahm dansimp dansimp 05/17/2018

Deploy Windows Defender Application Control policies by using Microsoft Intune

Applies to:

  • Windows 10
  • Windows Server 2016

You can use Microsoft Intune to configure Windows Defender Application Control (WDAC). You can configure Windows 10 client computers to only run Windows components and Microsoft Store apps, or let them also run reputable apps defined by the Intelligent Security Graph.

  1. Open the Microsoft Intune portal and click Device configuration > Profiles > Create profile.

  2. Type a name for the new profile, select Windows 10 and later as the Platform and Endpoint protection as the Profile type.

    Configure profile

  3. Click Configure > Windows Defender Application Control, choose from the following settings and then click OK:

    • Application control code intergity policies: Select Audit only to log events but not block any apps from running or select Enforce to allow only Windows components and Store apps to run.
    • Trust apps with good reputation: Select Enable to allow reputable apps as defined by the Intelligent Security Graph to run in addition to Windows components and Store apps.

    Configure WDAC