From a7aeed8d199a4c81553a6516c9a06b7a5b998cf4 Mon Sep 17 00:00:00 2001
From: Horst Schlimmer <jonas.praemassing@posteo.de>
Date: Tue, 19 Nov 2024 18:38:28 +0100
Subject: [PATCH 1/4] Update WinSEPolicy.xml

---
 WDAC-Policy-Wizard/app/MSIX/Templates/WinSEPolicy.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/WDAC-Policy-Wizard/app/MSIX/Templates/WinSEPolicy.xml b/WDAC-Policy-Wizard/app/MSIX/Templates/WinSEPolicy.xml
index 6365af69..1d92041a 100644
--- a/WDAC-Policy-Wizard/app/MSIX/Templates/WinSEPolicy.xml
+++ b/WDAC-Policy-Wizard/app/MSIX/Templates/WinSEPolicy.xml
@@ -89,7 +89,7 @@
     <Deny ID="ID_DENY_ADDINPROCESS32" FriendlyName="AddInProcess32.exe" FileName="AddInProcess32.exe" MinimumFileVersion="65535.65535.65535.65535" />
     <Deny ID="ID_DENY_ADDINUTIL" FriendlyName="AddInUtil.exe" FileName="AddInUtil.exe" MinimumFileVersion="65535.65535.65535.65535" />
     <Deny ID="ID_DENY_ASPNET" FriendlyName="aspnet_compiler.exe" FileName="aspnet_compiler.exe" MinimumFileVersion="65535.65535.65535.65535" />
-    <Deny ID="ID_DENY_BGINFO" FriendlyName="bginfo.exe" FileName="BGINFO.Exe" MinimumFileVersion="4.21.0.0" />
+    <Deny ID="ID_DENY_BGINFO" FriendlyName="bginfo.exe" FileName="BGINFO.Exe" MaximumFileVersion="4.21.0.0" />
     <Deny ID="ID_DENY_DBGHOST" FriendlyName="dbghost.exe" FileName="DBGHOST.Exe" MinimumFileVersion="2.3.0.0" />
     <Deny ID="ID_DENY_DBGSVC" FriendlyName="dbgsvc.exe" FileName="DBGSVC.Exe" MinimumFileVersion="2.3.0.0" />
     <Deny ID="ID_DENY_DOTNET" FriendlyName="dotnet.exe" FileName="dotnet.exe" MinimumFileVersion="65535.65535.65535.65535" />
@@ -539,4 +539,4 @@
       </Value>
     </Setting>
   </Settings>
-</SiPolicy>
\ No newline at end of file
+</SiPolicy>

From ff1498ff987ec0635fbcf7f26466d210966f37e8 Mon Sep 17 00:00:00 2001
From: Horst Schlimmer <jonas.praemassing@posteo.de>
Date: Tue, 19 Nov 2024 18:39:17 +0100
Subject: [PATCH 2/4] Update Recommended_UserMode_Blocklist.xml

---
 .../app/MSIX/Templates/Recommended_UserMode_Blocklist.xml     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/WDAC-Policy-Wizard/app/MSIX/Templates/Recommended_UserMode_Blocklist.xml b/WDAC-Policy-Wizard/app/MSIX/Templates/Recommended_UserMode_Blocklist.xml
index a0b58589..bded817f 100644
--- a/WDAC-Policy-Wizard/app/MSIX/Templates/Recommended_UserMode_Blocklist.xml
+++ b/WDAC-Policy-Wizard/app/MSIX/Templates/Recommended_UserMode_Blocklist.xml
@@ -20,7 +20,7 @@
     <Deny ID="ID_DENY_ADDINUTIL" FriendlyName="AddInUtil.exe" FileName="AddInUtil.exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
     <Deny ID="ID_DENY_ASPNET" FriendlyName="aspnet_compiler.exe" FileName="aspnet_compiler.exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
     <Deny ID="ID_DENY_BASH" FriendlyName="bash.exe" FileName="bash.exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
-    <Deny ID="ID_DENY_BGINFO" FriendlyName="bginfo.exe" FileName="BGINFO.Exe" MinimumFileVersion="4.21.0.0" />
+    <Deny ID="ID_DENY_BGINFO" FriendlyName="bginfo.exe" FileName="BGINFO.Exe" MaximumFileVersion="4.21.0.0" />
     <Deny ID="ID_DENY_CBD" FriendlyName="cdb.exe" FileName="CDB.Exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
     <Deny ID="ID_DENY_CSI" FriendlyName="csi.exe" FileName="csi.Exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
     <Deny ID="ID_DENY_CSCRIPT" FriendlyName="cscript.exe" FileName="cscript.exe" MinimumFileVersion="5.812.10240.0" />
@@ -1393,4 +1393,4 @@
   <UpdatePolicySigners />
   <CiSigners />
   <HvciOptions>0</HvciOptions>
-</SiPolicy>
\ No newline at end of file
+</SiPolicy>

From a8c0f827d1d571d751e2a52b268ecfe599a63949 Mon Sep 17 00:00:00 2001
From: Horst Schlimmer <jonas.praemassing@posteo.de>
Date: Tue, 19 Nov 2024 18:40:34 +0100
Subject: [PATCH 3/4] Update WinSEPolicy.xml

---
 .../app/Resources/policyTemplates/WinSEPolicy.xml             | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/WDAC-Policy-Wizard/app/Resources/policyTemplates/WinSEPolicy.xml b/WDAC-Policy-Wizard/app/Resources/policyTemplates/WinSEPolicy.xml
index 6365af69..1d92041a 100644
--- a/WDAC-Policy-Wizard/app/Resources/policyTemplates/WinSEPolicy.xml
+++ b/WDAC-Policy-Wizard/app/Resources/policyTemplates/WinSEPolicy.xml
@@ -89,7 +89,7 @@
     <Deny ID="ID_DENY_ADDINPROCESS32" FriendlyName="AddInProcess32.exe" FileName="AddInProcess32.exe" MinimumFileVersion="65535.65535.65535.65535" />
     <Deny ID="ID_DENY_ADDINUTIL" FriendlyName="AddInUtil.exe" FileName="AddInUtil.exe" MinimumFileVersion="65535.65535.65535.65535" />
     <Deny ID="ID_DENY_ASPNET" FriendlyName="aspnet_compiler.exe" FileName="aspnet_compiler.exe" MinimumFileVersion="65535.65535.65535.65535" />
-    <Deny ID="ID_DENY_BGINFO" FriendlyName="bginfo.exe" FileName="BGINFO.Exe" MinimumFileVersion="4.21.0.0" />
+    <Deny ID="ID_DENY_BGINFO" FriendlyName="bginfo.exe" FileName="BGINFO.Exe" MaximumFileVersion="4.21.0.0" />
     <Deny ID="ID_DENY_DBGHOST" FriendlyName="dbghost.exe" FileName="DBGHOST.Exe" MinimumFileVersion="2.3.0.0" />
     <Deny ID="ID_DENY_DBGSVC" FriendlyName="dbgsvc.exe" FileName="DBGSVC.Exe" MinimumFileVersion="2.3.0.0" />
     <Deny ID="ID_DENY_DOTNET" FriendlyName="dotnet.exe" FileName="dotnet.exe" MinimumFileVersion="65535.65535.65535.65535" />
@@ -539,4 +539,4 @@
       </Value>
     </Setting>
   </Settings>
-</SiPolicy>
\ No newline at end of file
+</SiPolicy>

From 75b732fbaad59343cf649e3804db3605783f2f88 Mon Sep 17 00:00:00 2001
From: Horst Schlimmer <jonas.praemassing@posteo.de>
Date: Tue, 19 Nov 2024 18:40:53 +0100
Subject: [PATCH 4/4] Update Recommended_UserMode_Blocklist.xml

---
 .../policyTemplates/Recommended_UserMode_Blocklist.xml        | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/WDAC-Policy-Wizard/app/Resources/policyTemplates/Recommended_UserMode_Blocklist.xml b/WDAC-Policy-Wizard/app/Resources/policyTemplates/Recommended_UserMode_Blocklist.xml
index a0b58589..bded817f 100644
--- a/WDAC-Policy-Wizard/app/Resources/policyTemplates/Recommended_UserMode_Blocklist.xml
+++ b/WDAC-Policy-Wizard/app/Resources/policyTemplates/Recommended_UserMode_Blocklist.xml
@@ -20,7 +20,7 @@
     <Deny ID="ID_DENY_ADDINUTIL" FriendlyName="AddInUtil.exe" FileName="AddInUtil.exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
     <Deny ID="ID_DENY_ASPNET" FriendlyName="aspnet_compiler.exe" FileName="aspnet_compiler.exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
     <Deny ID="ID_DENY_BASH" FriendlyName="bash.exe" FileName="bash.exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
-    <Deny ID="ID_DENY_BGINFO" FriendlyName="bginfo.exe" FileName="BGINFO.Exe" MinimumFileVersion="4.21.0.0" />
+    <Deny ID="ID_DENY_BGINFO" FriendlyName="bginfo.exe" FileName="BGINFO.Exe" MaximumFileVersion="4.21.0.0" />
     <Deny ID="ID_DENY_CBD" FriendlyName="cdb.exe" FileName="CDB.Exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
     <Deny ID="ID_DENY_CSI" FriendlyName="csi.exe" FileName="csi.Exe" MinimumFileVersion="0.0.0.0" MaximumFileVersion="65355.65355.65355.65355" />
     <Deny ID="ID_DENY_CSCRIPT" FriendlyName="cscript.exe" FileName="cscript.exe" MinimumFileVersion="5.812.10240.0" />
@@ -1393,4 +1393,4 @@
   <UpdatePolicySigners />
   <CiSigners />
   <HvciOptions>0</HvciOptions>
-</SiPolicy>
\ No newline at end of file
+</SiPolicy>