The Unsigned policy rule option is valid for Supplemental types

[HotCakeX]

Description

The rule option 6 Enabled:Unsigned System Integrity Policy (Default) is valid for supplemental policies, but the document says no.

Why

In fact, the 6 Enabled:Unsigned System Integrity Policy (Default) is required and must exist in supplemental policies that are not signed, without that rule option in the supplemental policy whose base policy is also unsigned, would throw an error by the ConvertFrom-CiPolicy cmdlet:

ConvertFrom-CIPolicy: Signed policy is required, but no UpdatePolicySigner is specified.

[learn-build-service-prod]

Learn Build status updates of commit 5de76c4:

✅ Validation status: passed

File	Status	Preview URL	Details
windows/security/application-security/application-control/windows-defender-application-control/design/select-types-of-rules-to-create.md	✅Succeeded

For more details, please refer to the build report.

For any questions, please:

• Try searching the learn.microsoft.com contributor guides
• Post your question in the Learn support channel

[jgeurten]

Good catch, @HotCakeX

[HotCakeX]

Thank you 🙏