Event banner
AMA: Windows Security
Event Ended
Wednesday, Jul 21, 2021, 11:00 AM PDTEvent details
Have questions about how to keep your devices protected and productive end to end? Have suggestions on where we should invest our engineering muscle to take Windows platform security even further? Cu...
Heather_Poulsen
Updated Jul 27, 2021
Jeffrey_Sutherland
Microsoft
Jul 21, 2021You can use Windows Defender Application Control (WDAC) to control what apps are allowed to run on Windows. WDAC policies can be deployed via Intune and Intune offers some basic, built-in policies that you can start from. That said, most customers will find they need to use custom policies which can be deployed through Intune using custom OMA-URI with the ApplicationControl CSP.
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/deploy-windows-defender-application-control-policies-using-intune
Jeffrey_Sutherland
Microsoft
Jul 21, 2021We’d love to hear what additional features you’d like to see with Intune management of application control.
- Jeffrey_SutherlandJul 21, 2021
Microsoft
Also, Intune is currently working on improvements to streamline custom policy management for WDAC as well as some other features. If you're interested in participating in their private preview, you can email appcontrolpreview@microsoft.com