Implement and Configure Windows Defender Application Control (WDAC)

Step 7. File rules

You have the option to create custom rules or remove existing ones

Click "Next"

The Windows Defender Application Control (WDAC) was created successfully,

Step 8. Convert your WDAC policy XML to binary

1. Open PowerShell ISEas an Administrator
2. Type the following command "convertFrom-ciPolicy -XmlFilePath c:\wdac\wdacpolicy.xml -BinaryFilePath c:\wdac\siPolicy.p7b "
3. Then click the "Run Script" button
   

In my next article, you will learn how to deploy and manage WDAC policies on a domain controller.....

Deploy and manage the WDAC Policy in the domain controller

1. Go to the Windows Server 2026 or the Windows Server's latest version
2. Copy the SiPolicy.p7b file and then create a new folder on the domain controller and paste it
3. Then share that folder with everyone

Step 8. Deploy on Windows server

1. Open the Group Policy Management from the Server manager
2. Click "Tools"
3. Then Click "Group Policy Management"
   

Step 9. Create a new GPO and link to the domain

1. Right-click on your Domain "techshifa.local"
2. Then Click "Create a GPO in this domain, and Link it here" to Create a GPO
   

Step 10. Edit the GPO policy

1. Go to "Computer Configuration"
2. Click "Policies"
3. Then Click "Administrative Template"
4. Then Select "System"
5. Click on "Device Guard"
6. Then double-click the Deploy Widows Defender application controller
   

Step 11. Deploy WDAC

1. Click "Enable"
2. And then put the path for the WDAC policy\\DC1.techshifa.local\wdac\SiPolicy.p7b
3. Then Click OK

Note. This policy is attached to the domain and will affect all devices

Once a client computer is set up with an Active Directory-based GPO, it typically takes 20 minutes for the client computer to apply any settings after a Group Policy refresh. By default, the Group Policy refresh occurs in the background every 90 minutes with a delay of 0 to 30 minutes. (Source Microsoft)

To update the group policy on a computer, you can follow these steps

By following these steps, you can manually update the group policy on your computer through the command prompt as an administrator.

1. Open the command prompt as an administrator.
2. Type the following command to update the policy "gpupdate /force"
3. Press Enter to execute the command.

Note. This will initiate an update of the group policy settings, on your computer.