App Control Tray and Policy Manager 5.2

Thanks to @Skyb0rg007 who helped me in another project (WildByDesign/win32-appcontainer-tools#1) to create a workflow in Github Actions to build the binaries directly on Github. This gives confidence in knowing that the binaries directly match the code in the repo. It also makes it easier for me to get each release done.

• Improved Per-monitorV2 DPI scaling
• Better measurement and spacing for GUI controls

Note: EFI (Signed/System) section is still unfinished.

App Control Tray and Policy Manager 5.1

This release is all about overall polish, particularly related to different DPI scaling factors. Some nice Policy ListView enhancements and fixes as well.

• Dynamically measuring all GUI controls to ensure proper placement in all scaling factors
• Policy ListView enhancements and fixes
  • Switched policy ListView font to Cascadia Code for better, smoother viewing experience
  • Fixed timing of when policy ListView columns automatically resize to fit the content within
  • Fixed some visual glitches with text in policy ListView using DOUBLEBUFFER
• Removed Close and About button as they were unnecessary

Note: The EFI (Signed/System) policy view option under Filtering Options is still very much a work-in-progress. There is still a lot that I want to do there but I have to proceed carefully.

App Control Tray and Policy Manager 5.0.1

• Added EFI (Signed/System) button to the Filtering Options section
  • This allows easily viewing (and sorting) all signed/system policies that are protected in the EFI partition
  • In the future, I would like to add options here for managing signed/system policies (cautiously)
• Added Vulnerable Driver Blocklist check to the Current Policy Information section
• Added App Control Wizard button (shortcut) to the Tools & Logs section
  • If App Control Wizard is not installed, it can optionally take the user to the Download page

Fixed in 5.0.1:

• Fixed bug with Current Policy Information where it was not retrieving the Vulnerable Driver Blocklist status after the auto-refresh when adding or removing policies.

App Control Tray and Policy Manager 5.0

• Added EFI (Signed/System) button to the Filtering Options section
  • This allows easily viewing (and sorting) all signed/system policies that are protected in the EFI partition
  • In the future, I would like to add options here for managing signed/system policies (cautiously)
• Added Vulnerable Driver Blocklist check to the Current Policy Information section
• Added App Control Wizard button (shortcut) to the Tools & Logs section
  • If App Control Wizard is not installed, it can optionally take the user to the Download page

App Control Tray and Policy Manager 4.8

This release fixes a couple of minor issues but, most importantly, fixes the problem in Light Mode where the buttons, scrollbars and header were showing up dark. Light Mode was a contrasting disaster!

Clearly I am not a regular user of Light Mode. But for any Light Mode users out there, this release should be a relief.

• fixes Light Mode
• fixes glitches when hovering over Policy Options due to $LVS_EX_INFOTIP
• cleaned up parsing of Policy Options

App Control Tray and Policy Manager 4.7

This release focuses solely on ensuring that the logic, support and functionality for Windows 11 23H2 users is on par with how everything already functions for 24H2 users. The older CiTool in pre-24H2 versions of Windows 11 lacks a few options in the output.

If a pre-24H2 version of Windows 11 is detected, the following changes apply:

• An asterisk is added to the information in the columns where no output is provided.
• A small label is added in the bottom-left corner of the UI so users understand why some details are missing.
• The filtering button for Signed policies is disabled since CiTool on 23H2 does not provide this detail.
• VersionString is not provided by CiTool on 23H2, therefore Version is obtained and converted to VersionString
  • Spacial thanks for @kimoppalfens and @diversenok for help with this logic

Screenshot showing what 23H2 users will see:

App Control Tray and Policy Manager 4.6

Policy Manager - Added:

• Increased supported policy limit to 32 policies.
• Added Convert (xml to binary) button for easy policy conversion.
• Added a count of Enforced policies in the Current Policy Information section.

Policy Manager - Fixed:

• Policy Manager had a parsing bug in which any CiTool properties that came back blank would incorrectly have that blank line stripped which would cause the arrays to fail and ultimately crash the program. (Thanks to @Skyb0rg007 and @SokratisUNI for reporting and testing.)

App Control Tray Tool:

• Updated the integrated App Control Policy Manager to the latest

App Control Tray and Policy Manager 4.5

• Switched from the old App Control Policy List popup to the fully functional App Control Policy Manager

App Control Policy Manager can also be used as a standalone single executable portable app as well. It does not need the tray tool to work. This is essentially a powerful GUI wrapper for CiTool and more. More details below screenshot.

Details:

• Columns pre-sorted by: IsEnforced (descending), followed by BasePolicyID (ascending) and ,FriendlyName (ascending).
• All columns can be sorted.
• Win32-darkmode is used when system is in Dark Mode.
• Filtering options to show only Enforced, Base, Supplemental, Signed and System policies.
• Select as many checkboxes as you want for fast policy removal.
• Policy List (and status) automatically updates after adding or removing policies.
• Easy access directly to relevant event logs.

Important:

• Currently limited to systems with 20 or less WDAC policies (more will be added later).
• No logic for Signed policies yet.

Upcoming:

• Lots! I still have so many more ideas flowing.

App Control Tray Tool 4.0

• New icons that change the system tray icon dynamically depending on whether the policy status is Enforced Mode, Audit Mode or Not Configured.

• Updated the system tray tooltip to dynamically show whether the policy status is Enforced Mode, Audit Mode or Not Configured.

• Updated the App Control Wizard menu option so that when a user clicks on it, it will check to ensure that App Control Wizard is installed on the system. If not, it will open the App Control Wizard download page in the default browser. If it is already installed, it will launch the App Control Wizard program as it did previously.

App Control Tray Tool 3.5

• App Control Policy Status is faster now
  • Using PowerShell 7 (if available) and falling back to Windows PowerShell
• Removed the scripts directory and removed all four external PowerShell scripts
• Combined all of that functionality into the main code so as to not rely on external scripts
  • That functionality was related to:
  • Policy status
  • Adding/updating/removing policies
  • Policy conversion (.xml to .cip binary)
  • Adding and removing scheduled tasks for toast notifications