Event banner
Event details
Microsoft Defender Application Control is missing an easy way to add custom apps to the Allow List via Microsoft Endpoint Manager. We can do it via a custom OMA-URI config profile. But something so important (Application Allowlisting) should not be such a difficult process, am I right? Any chance to boost this MEM-managed Defender feature?
Jeffrey_Sutherland
Microsoft
MicrosoftThank you for the feedback. Providing improved authoring experiences for Windows Defender App Control (WDAC) policies is a high priority for us. The MEM Intune team currently has some features in Preview that will make it easier to manage/deploy your custom WDAC policies and also configure the Intune Management Extension as a managed installer. As we improve our reporting and policy authoring experiences in Microsoft Defender for Endpoint and Microsoft Endpoint Manager, here are a few useful tools that our teams maintain in Github that you may find useful.
microsoft/AaronLocker: Robust and practical application control for Windows (github.com)