New SupplementalWDACConfig
New-SupplementalWDACConfig
[-Normal]
-ScanLocation <String>
-SuppPolicyName <String>
[-PolicyPath <FileInfo>]
[-Deploy]
[-SpecificFileNameLevel <String>]
[-NoUserPEs]
[-NoScript]
[-Level <String>]
[-Fallbacks <String[]>]
[-SkipVersionCheck]
[-Confirm]
[<CommonParameters>]Creates a Supplemental policy for a base policy based on a folder path.
The directory or drive that you want to scan for files that will be allowed to run by the Supplemental policy.
| Type: | String |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Add a descriptive name for the Supplemental policy. Accepts only alphanumeric and space characters.
| Type: | String |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Browse for the xml file of the Base policy this Supplemental policy is going to expand. Supports tab completion by showing only .xml files with Base Policy Type.
| Type: | FileInfo |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Automatic: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Indicates that the module will automatically deploy the Supplemental policy after creation.
| Type: | SwitchParameter |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Offers the same official Levels to scan the specified directory path.
| Type: | String |
|---|---|
| Position: | Named |
| Default value: | WHQLFilePublisher |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Offers the same official Fallbacks to scan the specified directory path.
| Type: | String[] |
|---|---|
| Position: | Named |
| Default value: |
FilePublisher,Hash
|
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
You can choose one of the following options:
- OriginalFileName
- InternalName
- FileDescription
- ProductName
- PackageFamilyName
- FilePath
More info available on Microsoft Learn
| Type: | String |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
By default, the module includes user PEs in the scan. When you use this switch parameter, they won't be included. More info available on Microsoft Learn
| Type: | SwitchParameter |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
More info available on Microsoft Learn
| Type: | SwitchParameter |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
- SupplementalPolicy
<Custom Name>.xml - {GUID}.cip
New-SupplementalWDACConfig
[-PathWildCards]
-FolderPath <DirectoryInfo>
-SuppPolicyName <String>
[-PolicyPath <FileInfo>]
[-Deploy]
[-SkipVersionCheck]
[-Confirm]
[<CommonParameters>]Creates a Supplemental policy that allows a folder path that includes one or more wildcard * character in it.
A folder path that includes at least one wildcard * character. Press TAB to open the folder picker GUI. Once you selected a folder, you will see the path will have \* at the end of it. You can modify the selected path by adding/removing wildcards * to it before proceeding.
| Type: | DirectoryInfo |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | True |
Add a descriptive name for the Supplemental policy. Accepts only alphanumeric and space characters.
| Type: | String |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Browse for the xml file of the Base policy this Supplemental policy is going to expand. Supports tab completion by showing only .xml files with Base Policy Type.
| Type: | FileInfo |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Automatic: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Indicates that the module will automatically deploy the Supplemental policy after creation.
| Type: | SwitchParameter |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
- SupplementalPolicy
<Custom Name>.xml - {GUID}.cip
New-SupplementalWDACConfig
[-InstalledAppXPackages]
-PackageName <String>
-SuppPolicyName <String>
[-PolicyPath <FileInfo>]
[-Deploy]
[-Force]
[-SkipVersionCheck]
[-Confirm]
[<CommonParameters>]Creates a Supplemental policy based on the package name of an installed app. More information at Microsoft Learn
Enter the package name of an installed app. Supports wildcard * character. e.g., *Edge* or "*Microsoft*".
| Type: | String |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | True |
Add a descriptive name for the Supplemental policy. Accepts only alphanumeric and space characters.
| Type: | String |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Browse for the xml file of the Base policy this Supplemental policy is going to expand. Supports tab completion by showing only .xml files with Base Policy Type.
| Type: | FileInfo |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Automatic: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Indicates that the module will automatically deploy the Supplemental policy after creation.
| Type: | SwitchParameter |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Indicates that the cmdlet won't ask for confirmation and will proceed with creating the Supplemental policy.
| Type: | SwitchParameter |
|---|---|
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
- SupplementalPolicy
<Custom Name>.xml - {GUID}.cip
- Create AppControl Policy
- Create Supplemental Policy
- System Information
- Configure Policy Rule Options
- Simulation
- Allow New Apps
- Build New Certificate
- Create Policy From Event Logs
- Create Policy From MDE Advanced Hunting
- Merge App Control Policies
- Deploy App Control Policy
- Get Code Integrity Hashes
- Get Secure Policy Settings
- Update
- Introduction
- App Control for Lightly Managed Devices
- App Control for Fully managed device - Variant 1
- App Control for Fully managed device - Variant 2
- App Control for Fully managed device - Variant 3
- App Control for Fully managed device - Variant 4
- App Control Notes
- How to Create and Deploy a Signed App Control Policy
- Fast and Automatic Microsoft Recommended Driver Block Rules updates
- App Control policy for BYOVD Kernel mode only protection
- EKUs in App Control for Business Policies
- App Control Rule Levels Comparison and Guide
- Script Enforcement and PowerShell Constrained Language Mode in App Control Policies
- How to Use Microsoft Defender for Endpoint Advanced Hunting With App Control
- App Control Frequently Asked Questions (FAQs)
- New-WDACConfig
- New-SupplementalWDACConfig
- Remove-WDACConfig
- Edit-WDACConfig
- Edit-SignedWDACConfig
- Deploy-SignedWDACConfig
- Confirm-WDACConfig
- New-DenyWDACConfig
- Set-CommonWDACConfig
- New-KernelModeWDACConfig
- Get-CommonWDACConfig
- Remove-CommonWDACConfig
- Assert-WDACConfigIntegrity
- Test-CiPolicy
- Get-CiFileHashes
- Get-CIPolicySetting
- Create Bootable USB flash drive with no 3rd party tools
- Event Viewer
- Group Policy
- How to compact your OS and free up extra space
- Hyper V
- Overrides for Microsoft Security Baseline
- Git GitHub Desktop and Mandatory ASLR
- Signed and Verified commits with GitHub desktop
- About TLS, DNS, Encryption and OPSEC concepts
- Things to do when clean installing Windows
- Comparison of security benchmarks
- BitLocker, TPM and Pluton | What Are They and How Do They Work
- How to Detect Changes in User and Local Machine Certificate Stores in Real Time Using PowerShell
- Cloning Personal and Enterprise Repositories Using GitHub Desktop
- Only a Small Portion of The Windows OS Security Apparatus
- Rethinking Trust: Advanced Security Measures for High‐Stakes Systems
- Clean Source principle, Azure and Privileged Access Workstations
- How to Securely Connect to Azure VMs and Use RDP
- Basic PowerShell tricks and notes
- Basic PowerShell tricks and notes Part 2
- Basic PowerShell tricks and notes Part 3
- Basic PowerShell tricks and notes Part 4
- Basic PowerShell tricks and notes Part 5
- How To Access All Stream Outputs From Thread Jobs In PowerShell In Real Time
- PowerShell Best Practices To Follow When Coding
- How To Asynchronously Access All Stream Outputs From Background Jobs In PowerShell
- Powershell Dynamic Parameters and How to Add Them to the Get‐Help Syntax
- RunSpaces In PowerShell
- How To Use Reflection And Prevent Using Internal & Private C# Methods in PowerShell
