windows-itpro-docs/windows/security/threat-protection/windows-defender-application-control/wdac-wizard.md

title, description, keywords, ms.assetid, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.localizationpriority, audience, ms.collection, author, ms.reviewer, ms.author, manager, ms.topic, ms.date, ms.technology

title	description	keywords	ms.assetid	ms.prod	ms.mktglfcycl	ms.sitesec	ms.pagetype	ms.localizationpriority	audience	ms.collection	author	ms.reviewer	ms.author	manager	ms.topic	ms.date	ms.technology
Windows Defender Application Control Wizard	Microsoft Defender Application Control Wizard (WDAC) Wizard allows users to create, edit, and merge application control policies in a simple to use Windows application.	allowlisting, blocklisting, security, malware	8d6e0474-c475-411b-b095-1c61adb2bdbb	m365-security	deploy	library	security	medium	ITPro	M365-security-compliance	jgeurten	isbrahm	dansimp	dansimp	conceptual	10/14/2020	mde

Windows Defender Application Control Wizard

Applies to:

• Windows 10
• Windows 11
• Windows Server 2016 and above

Note

Some capabilities of Windows Defender Application Control are only available on specific Windows versions. Learn more about the Windows Defender Application Control feature availability.

The Windows Defender Application Control (WDAC) policy Wizard is an open-source Windows desktop application written in C# and bundled as an MSIX package. The Wizard was built to provide security architects with security, and system administrators with a more user-friendly means to create, edit, and merge WDAC policies. The Wizard desktop application uses the ConfigCI PowerShell Cmdlets in the backend so the output policy of the Wizard and PowerShell cmdlets is identical.

Downloading the application

The WDAC Wizard can be downloaded from the official Wizard installer website as an MSIX packaged application. The Wizard's source code is available as part of Microsoft's Open Source Software offerings on GitHub at the WDAC Wizard Repo.

Supported Clients

As the WDAC Wizard uses the cmdlets in the background, the Wizard is functional on clients only where the cmdlets are supported as outlined in WDAC feature availability. Specifically, the tool will verify that the client meets one of the following requirements:

• Windows builds 1909+
• For pre-1909 builds, the Enterprise SKU of Windows is installed

If neither requirement is satisfied, the Wizard will throw an error as the cmdlets are not available.

In this section

Topic	Description
Creating a new base policy	This article describes how to create a new base policy using one of the supplied policy templates.
Creating a new supplemental policy	This article describes the steps necessary to create a supplemental policy, from one of the supplied templates, for an existing base policy.
Editing a base or supplemental policy	This article demonstrates how to modify an existing policy and the Wizard's editing capabilities.
Merging policies	This article describes how to merge policies into a single application control policy.