Windows 10: WDAC How to allow .tmp.node file by Electron app?

Hi all,I'm facing an issue with .tmp.node file that executed by an application called Ledger Live and written by Electron.This application generated a temporary file with random filename in user's Temp folder and then executed.I tried to allow the application's folder C:\Program Files\Ledger Live\* and even whitelist *.tmp.node in the WDAC policy XML. But the WDAC was still blocked this .temp.node file execute as the below screenshot.Is there a way to allow it to run or skip the Enterprise signing level check? Thanks.

:)

 

Allow WDAC application Control policy to allow Microsoft patches to run

Hello All,

I have created WDAC policy on Windows 10 enterprise. I created the WDAC policy in the following method:

I used the following files to merged and created the .BIN file

1. AllowMicrosoft.xml(default Microsoft example files that comes with he OS- to allow Microsoft program to run)

2.Program Files.xml(scanned the program Files for installed applications)

3.Program Filesx86.xml(scanned the program Filesx86 for installed applications)

4 BlockRules.xml(Microsoft recommended block rules for WDAC)

Merged the above 4 files and created the Mypolicy.xml and convertd to .bin files and copy to SIPolicy.p7b

However I can see Microsoft office patches(.MSP) downloaded from WSUs violated the code integrity.

I would like to know how to bypass the patch files in CI policy.I believe I cant scan the folder and merge with the existing policy as patch files would be different for different period?

one of the error msg :

code integriy module \windows\installer\MSI8448.tmp against policy

anybody can shed some light would be appreciated.

Thank you,

Regards,

Alles

 

How to change location of MSI????.tmp file

Hi,

You may change the location of the .tmp file by following the steps provided below:

• Go to This PC.
• Right-click This PC, and then select Advanced System Setting.
• Click Environment Variables.
• Under system variable, double-click tmp and change the path for the file of your reference.

If the location still can't be changed, we suggest that you post it on our
MSDN forum. We have highly technical users and IT professionals there that can address your concern.

Feel free to contact us if you have other concerns.

 

"All Apps" node is missing on start menu

I'm using Win10. Start menu used to have a expandable node called "All Apps" that were together with Power button, settings, recently used applications, etc. Now that node disappeared and all apps are listed all the time. What annoys me is that I used to
be able to navigate to my icons using arrow keys, and now the arrow keys will not get me passed the applications list (my icons are to the right of it). Makes sense? I could add some screen captures is necessary.

Any suggestions?

Thanks.