New-CIPolicyRule cannot accept single files in user mode

[timbrigham-oc]

If attempting to create a new rule for a specific file in a folder (say one specific binary out of C:\Windows\system32, my specific use case) there is no ready way to inform New-CIPolicyRule that the -DriverFiles argument that will accept a list of raw file names, or a single raw file name needs to have the UserMode flag set.

For example:

New-CiPolicyRule -DriverFiles $createdFromDriverScan[1] -Level Publisher -Fallback Hash
will have UserMode set to true. 

The exact same file if passed directly to New-CIPolicyRule:

New-CiPolicyRule -DriverFiles "C:\Temp\helloWorld.ps1" -Level Publisher -Fallback Hash
will have UserMode set to false, with no way to edit it. 

I also looked into initializing a custom Microsoft.SecureBoot.UserConfig.DriverFile object so I could set this parameter myself, but there isn't an obvious way to do this.

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: bd2d20e9-996d-98cc-1866-261ca4d51f46
• Version Independent ID: e971f828-e670-0108-f95a-7ae602b4ad94
• Content: New-CIPolicyRule (ConfigCI)
• Content Source: docset/winserver2022-ps/configci/New-CIPolicyRule.md
• Product: w10
• Technology: windows
• GitHub Login: @JasonGerend
• Microsoft Alias: jgerend

[officedocspr5]

To make it easier for you to submit feedback on articles on learn.microsoft.com, we're transitioning our feedback system from GitHub Issues to a new experience.

As part of the transition, this GitHub Issue will be moved to a private repository. We're moving Issues to another repository so we can continue working on Issues that were open at the time of the transition. When this Issue is moved, you'll no longer be able to access it.

If you want to provide additional information before this Issue is moved, please update this Issue before December 15th, 2023.

With the new experience, you no longer need to sign in to GitHub to enter and submit your feedback. Instead, you can choose directly on each article's page whether the article was helpful. Then you can then choose one or more reasons for your feedback and optionally provide additional context before you select Submit.

Here's what the new experience looks like.

Note: The new experience is being rolled out across learn.microsoft.com in phases. If you don't see the new experience on an article, please check back later.

First, select whether the article was helpful:

Then, choose at least one reason for your feedback and optionally provide additional details about your feedback:

Article was helpful	Article was unhelpful

Finally, select Submit and you're done!