Managed Installer

[TOL-Slyv]

Hello,

I may have overlooked something, but I am attempting to add a Managed Installer such as Chocolatey or Intune. However, I am unable to find the appropriate method to do so.

[HotCakeX]

Hi,
I'm planning on adding it to the AppControl Manager app soon but for now please use this document: https://learn.microsoft.com/en-us/windows/security/application-security/application-control/app-control-for-business/design/configure-authorized-apps-deployed-with-a-managed-installer

[HotCakeX]

Hi @TOL-Slyv, as promised i added Managed Installer support to the AppControl Manager: https://github.com/HotCakeX/Harden-Windows-Security/releases/tag/AppControlManager-v2.0.58.0

It is only for Intune, not custom agents. If you really need to set custom agents as MI I can add that feature too. Although please keep in mind that if you set an executable that does not require Admin privilege as MI, you'll have created a situation where users can install anything through that, making App Control policies essentially ineffective. Intune's extension runs with elevated privilege, that's why it's safer.

[TOL-Slyv]

Hello.
That sounds good. My plan is to use Chocolatey through Intune, but I’m not sure if automatic updates via Chocolatey will be blocked.

[jumpingbrowntrout]

For a standalone PC that doesn't have Intune subscription. Can we winget as a MI please?