Installation

Install it from the Microsoft Store: https://apps.microsoft.com/detail/9png1jddtgp8

Documentation

What's New

• 🐉 Enhanced the Intune cloud deployment workflow with a dedicated page that lets you enumerate all Microsoft 365 and Intune groups in your tenant and select which group(s) to assign to the App Control policy you are deploying. The page includes search, sorting, and filtering capabilities to help you pinpoint target groups, and you can export the results to JSON for offline analysis. Completes this issue.

  • ✔️ Previously only the first 100 groups were retrieved from Microsoft Graph; that restriction has been removed, all groups are now fetched and displayed.

  • ✔️ Added a UI button that generates 50 dummy groups in your tenant's Entra with randomized details for testing purposes.

  • ✔️ Critical operations require explicit confirmation in the UI to help prevent accidental tenant modifications.

• 🍭 You can now add or remove groups in your tenant's Entra directly from the app, no need to visit the Entra portal. This functionality is available on the newly added Entra group assignment and management page.

• 🦀 Fetching custom Intune device configuration policies from the System Information page now supports pagination, removing previous retrieval limits.

• 💪 Improved resilience of Microsoft Graph connections to better handle transient network issues and unstable connections.

• 📏 Implemented more aggressive memory cleanup when the app window closes, enabling faster and more predictable reclamation of used memory.

  • 💢 These memory optimizations also apply to the Harden System Security app due to shared common code.

• 🍬 Refined the styling and behavior of content dialogs across the app. Resizing no longer produces a semi-transparent shadow artifact.

  • 💢 The fix also applies to the Harden System Security app due to shared common code.

• 🍫 Implemented a token refresh mechanism for Microsoft Graph. Sign in once and continue using AppControl Manager for extended periods without re-authentication. Silent refresh events are logged for auditing; for security reasons, only the account name/email associated with the token is included in the log. Automatic refresh is initiated when a token has less than 10 minutes remaining before expiration.

• 🌏 Improved localization across UI elements for better internationalization and consistency.

• 💎 Substantial performance enhancements across numerous operations, simulation runs, file/folder scans, event log scans, MDE Advanced Hunting processing, and more. These optimizations deliver faster completion times while reducing memory usage.

  • 💢 Comparable performance improvements have been implemented in the Harden System Security app as well.

• 🪽 All ListViews in AppControl Manager now respect the Font Family configured in app settings, affecting both headers and content.

• 🌿 Microsoft Graph sign-in controls have been redesigned for clarity: each method now displays a more user-friendly label and an accompanying icon. The selected sign-in method is persisted in app settings so your preferred option is preselected on subsequent uses.

• 🧨 The Create Supplemental Policy page's Files and Folders ListView now uses an incremental collection with dynamic column-width adjustment. This is the second page to adopt that capability (the first is the Create Deny Policy page). Both ListViews can perform full-disk scans to build supplemental or deny policies for discovered files, and incremental collections provide the scalability needed to present large datasets responsively.

• 🐞 Fixed a visual bug in the Total counts number displayed on the UI of Create Deny Policy page. It wouldn't show 0 when all the data was cleared.

• 🪲 Fixed a bug in the Create Deny Policy page where right-clicking on an item in list view and selecting to open it's location in File Explorer wouldn't work and would silently fail / do nothing.

PRs

• #857

How to verify the MSIXBundle's authenticity:

gh attestation verify "Path To MSIXBundle" --repo HotCakeX/Harden-Windows-Security --format json

You can install the GitHub CLI from Winget:

winget install --id GitHub.cli