> Source: [sk183703](https://support.checkpoint.com/results/sk/sk183703)

# sk183703 - Harmony Endpoint blocks access to Windows Defender Application Control (WDAC) folders

| Property | Value |
|----------|-------|
| Solution ID | sk183703 |
| Date Created | 2025-07-27 |
| Last Modified | 2025-07-29 |
| Technical Level | Advanced |
| Products | Endpoint Security |
| Versions | E89.X, E88.X |
| OS | Windows |

## Symptoms

- Harmony Endpoint blocks access to Windows Defender Application Control (WDAC) folders

## Cause

[Windows Defender Application Control](https://learn.microsoft.com/en-us/windows/security/application-security/application-control/windows-defender-application-control/wdac-and-applocker-overview) (WDAC), can be used maliciously to block Endpoint program files such as executable files, dynamic link libraries, system files, PowerShell scripts and Component Object Model (COM) objects. Blocking these files can reduce or remove the Endpoint protection.

To mitigate this vulnerability, starting from version E88.50, Windows Harmony Endpoint **blocks** all write access to WDAC folders **by default**, except for specific signed processes.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content