Skip to content

Confirm WDACConfig

Violet edited this page Jul 15, 2023 · 11 revisions

Confirm-WDACConfig available parameters

Notes

  • Mandatory parameters indicate you always need to provide values for them.

  • Automatic parameters indicate that if you used Set-CommonWDACConfig cmdlet to set default values for them, the module will automatically use them. This saves time and prevents repetitive tasks. However, if no value exists in User Configurations for an Automatic parameter and you didn't explicitly provide a value for that parameter either, then you will see an error asking you to provide value for it. Explicitly providing a value for an Automatic parameter in the command line overrides its default value in User Configurations, meaning the module will ignore the value of the same parameter in the User Configurations file.

  • Optional parameters indicate that they are not required and without using them the module will automatically run with the optimal settings.

  • Many cmdlets and parameters of the module support the PowerShell's built-in -Debug switch and when that switch is used, they display extra details and debugging messages on the console, showing you what's happening under the hood.


Confirm-WDACConfig -ListActivePolicies

image

Confirm-WDACConfig [-ListActivePolicies] [-OnlyBasePolicies] [-OnlySupplementalPolicies]

Lists the non-System Base and Supplemental WDAC Policies using CITool and displays their counts.

Has 2 optional parameter

  • -OnlyBasePolicies: Using this will only display Base policies.
  • -OnlySupplementalPolicies: Using this will only display Supplemental policies.

horizontal super thin rainbow RGB line

Confirm-WDACConfig -VerifyWDACStatus

image

Confirm-WDACConfig [-VerifyWDACStatus]

Shows the status of User-mode and Kernel-mode application control.


horizontal super thin rainbow RGB line

Confirm-WDACConfig -CheckSmartAppControlStatus

image

Confirm-WDACConfig [-CheckSmartAppControlStatus]

Checks the status of Smart App Control and reports the results on the console, including the evaluation mode expiration date.


C#


Clone this wiki locally