System Information

System Information

Currently Deployed Policies

Use this section in AppControl Manager to view details about the deployed App Control policies on the system.

• Search through the list of policies

• View the rule options in each policy

• Determine which policy is signed or unsigned (requires Windows 11 24H2 or later/Windows Server 2025 or later, otherwise all policies will appear as unsigned regardless of their actual signing status)

• Sort the policies using multiple criteria

• See which policy is Base, Supplemental or System

• View the version of each policy

• Easily open the selected deployed policy in Policy Editor where you can view all of its details, modify it and save it to a file. This is very useful to know what rules are included in the deployed policies on your system. It also supports protected System policies that come by default with the OS.

Tip

You can view the version of the Microsoft Vulnerable Driver Block List in this page by checking the box for including System policies in the list.

Policy Removal

This section also allows you to remove the deployed non-system App Control policies from the system.

Whenever you select a policy from the list, the app will automatically present to you the best and most appropriate course of action in order to remove it.

Removing Unsigned or Supplemental Policies

Unsigned Base or signed/unsigned Supplemental Application Control policies can be removed with a single click/tap of a button. Simply select a policy from the list and then use the Remove button to remove it.

Starting with Windows 11 24H2/Windows Server 2025, no reboot is required for unsigned base or supplemental policies.

Removing Signed Base Policies

Signed Base policies require additional information during the removal process. Select a signed policy and then press the Remove button, you will be presented with a dialog asking for additional information.

• Certificate File: Provide the path to the certificate .cer file. The certificate's details must exist in the XML policy file as signers, so ensure it is the same certificate that you used to sign the policy with. The certificate must exist in the Personal store of the Current User certificate stores with private key.

• Certificate Common Name: The Common Name (CN) of the same certificate file you select.

• XML File: The path to the XML policy file of the same policy you're trying to remove from the system.

Once all four fields are populated, press the Verify button. This action validates your inputs and enables the Submit button, allowing you to proceed with the removal process. All of the information you submit will be saved in app settings so that the next time they will be automatically populated for you.

Following this step, the policy will be re-signed and redeployed on the system with a new rule option labeled Enabled: Unsigned System Integrity Policy.

Important

After completing this process, restart your system. Since signed policies are tamper-resistant, they leverage Secure Boot and reside in the EFI partition. Upon reboot, select the same signed policy and press the Remove button. The AppControl Manager will detect the policy as safe for removal and delete it from the system without requiring further input. (If you do not reboot your system and attempt to remove the signed policy that was just re-signed and re-deployed, it will lead to boot failure.)

Note

About the Automatic Policies filter option

Enabling this checkbox includes supplemental policies named AppControlManagerSupplementalPolicy in the displayed results. Each base policy created and deployed via the AppControl Manager automatically deploys a corresponding supplemental policy with this name. This supplemental policy is essential for the operation of the AppControl Manager application itself. If you intentionally remove this policy, you will no longer be able to launch the AppControl Manager when certain base policies are active.

Note that these supplemental policies are automatically removed when their associated base policy is removed from the system, so no additional action is required on your part.

You can view the XML source of the AppControlManagerSupplementalPolicy supplemental policy here.

Swapping Policies

You can seamlessly swap any deployed policy on the System Information page. For example, if the "Allow Microsoft" policy is active and you want to switch to "Default Windows," simply select "Default Windows" from the dropdown menu and confirm your choice. All supplemental policies associated with the base policy will continue to function. Currently, this feature supports only unsigned policies; support for signed policies will be added in a future release.

Online Policies

Use the Microsoft Graph Button to sign into your account and then press the Retrieve Online Policies button to retrieve any available App Control policies from Intune. They will be populated in the List View where you can see them in detail, sort them, search through them and manage them.

• Remove Policy: After selecting an Intune policy, use this button to remove it from Intune. The devices that this policy is deployed to will have to reboot in order for the policy to be fully removed from them.

Code Integrity Information

In the Code Integrity Information section you can view advanced details about the current status of Code Integrity on the system.

You can also check the status of Application Control for Business, including whether User-Mode or Kernel-Mode policies are deployed and whether they are set to Enforced mode or Audit mode.