WDAC Whitelisting

[Stuart King]

Hi All

I am looking for a "Simple" solution to Whitelist apps via Intune.

And found this:

Deploy Windows Defender Application Control policies by using Microsoft Intune

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-con...

Which states:

" Intune includes native support for WDAC, which allows you to configure Windows 10 client computers to only run Windows components and Microsoft Store apps, or to also allow reputable apps as defined by the Intelligent Security Graph (ISG)."

So, my question would be, could approved apps be uploaded to the Microsoft Store for Business / deployed via Intune and this would count as MS Store Apps?

Info appreciated

[#2]

@Stuart King Don't think that's the case. I've heard users where even Intune Management Extension was blocked by this setting ;(

Have you considered Applocker and prevent unsigned apps from running?