App Control for Business (formerly WDAC)
ToolApp Control for Business is the current name for Windows Defender Application Control (WDAC), Microsoft's policy-driven allowlisting engine. It decides what is allowed to run right down to the kernel, so unauthorized or tampered binaries never get their moment. Pair it with signed policies and the Intelligent Security Graph and you get a supply chain integrity layer that trusts code because your policy says so, not because an antivirus guessed it was probably fine.
Key Features
Resources
Videos
Windows Defender Application Control (WDAC) Basics
Robert Crane breaks WDAC down to its fundamentals in this 29K-view primer, covering how to whitelist applications and DLLs on Windows 10 Professional and Enterprise. If you've ever wondered how code integrity policies actually work under the hood (or why that one app keeps getting blocked), this nine-minute explainer fills in the gaps without drowning you in Group Policy jargon.
How to Whitelist Apps in Microsoft 365 - WDAC + App Control for Business in Intune
WDAC meets modern endpoint management in this Intune-focused tutorial from BlueFolder. You'll see how to create application control policies, whitelist trusted software, and deploy WDAC through Microsoft 365's cloud management plane. It's the evolution from "we manage this box by box" to "we push policy from the cloud and sleep well at night."
More in Windows Workstations
- Microsoft Security Compliance Toolkit
- App Control for Business (formerly WDAC)
- Windows Baseline Hardening Service
- HardeningKitty
- Windows Supply Chain Security Guide