Managing apps and software deployment through Microsoft Intune
Cannot get allow for dlls in AppData to work.
To start, I have a large group of devices which I need to lock down from running anything other that specifically installed or allowed software. That part went swimmingly. A quick WDAC policy and nothing unwanted works.
Problem is that there are a few programs that I do need to work and I cannot get them to run properly. Problem is with unsigned files being added in AppData. I have tried every permutation of FilePath rule that I can find or think of:
%OSDRIVE%\Users\TestUser\Local\Temp\test01.dll
C:\Users\TestUser\Local\Temp\test01.dll
%OSDRIVE%\Users*\Local\Temp\test01.dll
C:\Users*\Local\Temp\test01.dll
%APPDATA%\Local\Temp\test01.dll
%LOCALAPPDATA%\Local\Temp\test01.dll
*\test01.dll
*test01.dll
Not a single one of these is allowing the application to work with these dlls. They are being added to the AppData\Local\Temp folder but that is where the function ceases. I get error 3033 immediately followed by error 3077 in the code integrity section of Event Viewer every time I run this applications .exe.
For the record, I cannot redirect these files in any way. Its just the way the software designer made it.
Edit01: I should add that the pair of Publisher rules in the policy are working as intended. Both .exe files were inoperable before adding them. So its not a problem with the policy not being executed.