Installation

Install it from the Microsoft Store: https://apps.microsoft.com/detail/9png1jddtgp8

What's New

• Improved the deployment page by adding flyouts to the browse buttons to display the files you select. The page is also augmented with the Sidebar so it supports quick policy file assignment.

• 🎉 You can now deploy signed policies in the deployment page.

• The system information page now allows the removal of all non-system policies. Whenever you select a policy, it will automatically detect the type of it and will take the appropriate action.

• Many guardrails have been put in place to guide the user during policy signing and signed policy removal in order to prevent accidents or boot failures when dealing with signed policies.

• Reduced the empty spaces at the top of certain pages.

• Made the remaining regex expressions throughout the code source generated and compiled for improved performance.

• 🎉 You can now seamlessly use the Allow New Apps page with signed policies. These policies are automatically recognized, and users are prompted to provide any additional information required for policy signing.

• The Microsoft Defender for Endpoint Advanced Hunting menu option has been moved out from under the Audit Event Logs Creation menu. It is now a primary menu entry, consistent with other main menu items.

• The Sidebar's auto-assignment feature is now enabled by default to streamline user interactions.

• The check for updates at app startup is now on by default. It simply checks to see if a new version of the app is available and informs the user if there is by showing a small dot on the update page's icon.

  • Both changes only apply to new app installations. If you've already toggled their buttons off then they remain off.

• 🎉 Added Microsoft Recommended Block Rules auto update mechanism to the Create Policy page. It uses a scheduled task that runs weekly to keep it up to date.

• Updated wiki documents to reflect the new auto update mechanism.

• Improved the app's name appearance in the title bar. It was too white in the light theme that made it hard to read.

• Added a horizontal separator line in the Code integrity information page to separate CI info from App Control info for better readability.

• 🎉 Added Application Control Status to the System Information page in the AppControl Manager.

  • It display the status of User Mode and Kernel Mode Application Control on the system. Valid values are:
    • Enforced Mode
    • Audit Mode
    • Disabled/Not Running

• 🎉 Improved the performance of file enumeration/indexing. This affects how fast files in a directory are found by the AppControl Manager.

Automated Release Notes

From now on each feature will have its own PR in order to make it easier to code review and track changes and to follow a more standard approach.

• AppControl-Manager-DownloadLink-Version-Update-Version-1.7.0.0 by @github-actions in #463
• Switch to file scoped namespace and other minor improvements by @HotCakeX in #465
• Bump Microsoft.Graphics.Win2D and Microsoft.WindowsAppSDK in /AppControl Manager by @dependabot in #468
• Bump actions/attest-build-provenance from 1 to 2 by @dependabot in #467
• Bump actions/attest-sbom from 1 to 2 by @dependabot in #466
• Implemented property pattern matching by @HotCakeX in #469
• Improving file enumeration in AppControl Manager by @HotCakeX in #470
• Added Application Control Status to the System Information page by @HotCakeX in #471
• Added Microsoft Recommended Block Rules auto update by @HotCakeX in #472
• Removed unused PowerShell logic belonging to WDACConfig by @HotCakeX in #473
• Configured default app settings by @HotCakeX in #475
• Implementing signed policy scenarios by @HotCakeX in #474
• Removing unused PowerShell logic for WDACCofig module by @HotCakeX in #483
• Adding signed policy support when allowing new apps in AppControl Manager by @HotCakeX in #482
• Improved Merge operation by @HotCakeX in #484

Full Changelog: AppControlManager.v.1.7.0.0...AppControlManager.v.1.8.0.0