sync: auto-sync from HOWARD-HOME at 2026-07-17 14:35:21

Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-17 14:35:21

clients/cascades-tucson/scripts/applocker-step1-enable.ps1

@@ -0,0 +1,28 @@
+# Step 1: Enable the Application Identity service (required for AppLocker)
+Set-Service -Name AppIDSvc -StartupType Automatic
+Start-Service -Name AppIDSvc -ErrorAction SilentlyContinue
+$svc = Get-Service AppIDSvc
+Write-Output "AppIDSvc: Status=$($svc.Status) StartType=$($svc.StartType)"
+
+# Get publisher info for apps we want to deny
+$deny = @('4DF9E0F8.Netflix','Microsoft.WindowsCamera','Microsoft.GamingApp','Microsoft.XboxApp',
+'Microsoft.XboxGameOverlay','Microsoft.XboxGamingOverlay','Microsoft.Xbox.TCUI',
+'Microsoft.XboxIdentityProvider','Microsoft.XboxSpeechToTextOverlay','Microsoft.ZuneVideo',
+'Microsoft.WindowsMaps','Microsoft.YourPhone','Microsoft.SkypeApp','Microsoft.People',
+'Microsoft.Messaging','Microsoft.MixedReality.Portal','Microsoft.Microsoft3DViewer',
+'Microsoft.Copilot','Microsoft.WindowsTerminal','Microsoft.Edge.GameAssist',
+'Microsoft.Getstarted','Microsoft.OneConnect','Microsoft.Windows.Photos','Microsoft.MSPaint',
+'Microsoft.Print3D','SpotifyAB.SpotifyMusic','Evernote.Evernote','C27EB4BA.DropboxOEM',
+'7EE7776C.LinkedInforWindows','AcerIncorporated.AcerCareCenterS',
+'AcerIncorporated.AcerCollectionS','AcerIncorporated.AcerRegistration')
+
+Write-Output ""
+Write-Output "=== Publisher info for deny list ==="
+foreach ($name in $deny) {
+    $pkg = Get-AppxPackage -AllUsers -Name $name -ErrorAction SilentlyContinue | Select-Object -First 1
+    if ($pkg) {
+        Write-Output "$name|$($pkg.Publisher)|$($pkg.PackageFamilyName)"
+    } else {
+        Write-Output "$name|NOT_INSTALLED|"
+    }
+}