How to secure W11 when using WSL?

[hj-collab]

Hi. How to secure W11 with WSL2? Any program from WSL2 can easily bypass WDAC and Windows firewall protection.

[HotCakeX]

Hi,
Compartmentalization is the key,

If you want to use everything on the same host/OS then I suggest applying the Harden Windows security script + Strict Kernel-mode WDAC policy

That gives you very decent protection.

WSL executables are in the Microsoft recommended block rules, so if you want to use them you need to use another environment that's not protected by User-mode WDAC policies. Use another physical device or Hyper-V VM with nested virtualization on the same device.