From 0c7ab1acd7a3fbb7065af449d746f263d92e4912 Mon Sep 17 00:00:00 2001 From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com> Date: Thu, 9 Nov 2023 10:19:45 -0500 Subject: [PATCH] added example with links to CSP - for review --- .../windows-firewall/hyper-v-firewall.md | 25 +++++++++++++++++-- 1 file changed, 23 insertions(+), 2 deletions(-) diff --git a/windows/security/operating-system-security/network-security/windows-firewall/hyper-v-firewall.md b/windows/security/operating-system-security/network-security/windows-firewall/hyper-v-firewall.md index 045970b469..33408db506 100644 --- a/windows/security/operating-system-security/network-security/windows-firewall/hyper-v-firewall.md +++ b/windows/security/operating-system-security/network-security/windows-firewall/hyper-v-firewall.md @@ -103,9 +103,26 @@ The output contains an extra value compared to the ones described in the previou > > To configure these **rules** per profile using the [Set-NetFirewallHyperVRule][PS-4] cmdlet with the `-Profile` option. -## Manage from Intune +## Configure with Configuration Service Provider (CSP) -You can also manage these settings online via Intune. +You can configure Hyper-V firewall using the [Firewall CSP][CSP-1]. For example, with an MDM solution like Microsoft Intune. + +Here's a list of settings that can be used to configure Hyper-v firewall: + +| | Path | +|--|--| +| **CSP** | `./Vendor/MSFT/Firewall/MdmStore/HyperVVMSettings/{VMCreatorId}/`[AllowHostPolicyMerge] +| **GPO** | Not available | + +| | Path | +|--|--| +| **CSP** | `./Vendor/MSFT/Firewall/MdmStore/HyperVVMSettings/{VMCreatorId}/DomainProfile/`[AllowLocalPolicyMerge] +| **GPO** | Not available | + +| | Path | +|--|--| +| **CSP** | `./Vendor/MSFT/Firewall/MdmStore/HyperVVMSettings/{VMCreatorId}/DomainProfile/`[EnableFirewall] +| **GPO** | Not available | @@ -114,3 +131,7 @@ You can also manage these settings online via Intune. [PS-3]: /powershell/module/netsecurity/get-netfirewallhypervrule [PS-4]: /powershell/module/netsecurity/set-netfirewallhypervrule [PS-5]: /powershell/module/netsecurity/set-netfirewallhypervprofile +[CSP-1]: /windows/client-management/mdm/firewall-csp +[AllowHostPolicyMerge]: /windows/client-management/mdm/firewall-csp#mdmstorehypervvmsettingsvmcreatoridallowhostpolicymerge +[AllowLocalPolicyMerge]: /windows/client-management/mdm/firewall-csp#mdmstorehypervvmsettingsvmcreatoriddomainprofileallowlocalpolicymerge +[EnableFirewall]: /windows/client-management/mdm/firewall-csp#mdmstorehypervvmsettingsvmcreatoriddomainprofileenablefirewall \ No newline at end of file