Installation

Install it from the Microsoft Store: https://apps.microsoft.com/detail/9png1jddtgp8

Documentation

What's New

• Added support for using Application Manifests. Microsoft currently offers 2 types of App Manifests, and AppControl Manager supports all of them: https://github.com/MicrosoftDocs/MS-AppControl-AppManifests

  • CMD: Causes CMD to obtain an exclusive handle to the batch file, effectively allowing batch scripts to be integrity verified a single time, rather than for each statement executed in the batch script.

  • PowerShell: The default behavior with WDAC and PowerShell is that when a script fails to pass policy, the language mode that the script is executed under changes to ConstrainedLanguageMode. This new policy setting changes that behavior when set, and instead blocks the script from executing entirely.

  • You can access the new features in the Create Policy page.

• Added an Intune check-in control that starts a local Windows MDM sync session, reports the session ID and state, and provides quick access to work or school settings. The control also surfaces app-visible local MDM session details and handles unenrolled or disconnected MDM states. Completes the following feature request: #1168