mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-09 02:57:22 +00:00
52 lines
1.8 KiB
Markdown
52 lines
1.8 KiB
Markdown
---
|
||
title: WDAC Admin Tips & Known Issues
|
||
description: WDAC Known Issues
|
||
keywords: security, malware
|
||
ms.prod: m365-security
|
||
audience: ITPro
|
||
ms.collection: M365-security-compliance
|
||
author: jsuther1974
|
||
ms.reviewer: jogeurte
|
||
ms.author: jogeurte
|
||
ms.manager: jsuther
|
||
manager: dansimp
|
||
ms.date: 04/14/2021
|
||
ms.technology: mde
|
||
ms.topic: article
|
||
ms.localizationpriority: medium
|
||
---
|
||
|
||
# WDAC Admin Tips & Known Issues
|
||
|
||
**Applies to:**
|
||
|
||
|
||
- Windows 10
|
||
- Windows 11
|
||
- Windows Server 2016 and above
|
||
|
||
>[!NOTE]
|
||
>Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the [Windows Defender Application Control feature availability](/windows/security/threat-protection/windows-defender-application-control/feature-availability).
|
||
|
||
This topic covers tips and tricks for admins as well as known issues with WDAC.
|
||
Test this configuration in your lab before enabling it in production.
|
||
|
||
## .NET native images may generate false positive block events
|
||
|
||
In some cases, the code integrity logs where WDAC errors and warnings are written will contain error events for native images generated for .NET assemblies. Typically, native image blocks are functionally benign as a blocked native image will fallback to its corresponding assembly and .NET will regenerate the native image at its next scheduled maintenance window.
|
||
|
||
## MSI Installations launched directly from the internet are blocked by WDAC
|
||
|
||
Installing .msi files directly from the internet to a computer protected by WDAC will fail.
|
||
For example, this command will not work:
|
||
|
||
```code
|
||
msiexec –i https://download.microsoft.com/download/2/E/3/2E3A1E42-8F50-4396-9E7E-76209EA4F429/Windows10_Version_1511_ADMX.msi
|
||
```
|
||
|
||
As a workaround, download the MSI file and run it locally:
|
||
|
||
```code
|
||
msiexec –i c:\temp\Windows10_Version_1511_ADMX.msi
|
||
```
|