From a04d5529d1a5f39dc9fae65960b7b3e110738f03 Mon Sep 17 00:00:00 2001 From: Michael Nady Date: Fri, 18 Mar 2022 01:49:55 +0200 Subject: [PATCH 1/3] Update defender-csp.md I searched for confirmations of the feedback online and found this link stating that a status exists with the name 'Blocked', so the commenter seems right in the link he sent as source of the enum https://support.huntress.io/hc/en-us/articles/4414493304595-Managed-AV-What-is-an-Incident-Report- --- windows/client-management/mdm/defender-csp.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/windows/client-management/mdm/defender-csp.md b/windows/client-management/mdm/defender-csp.md index 5cfdf4faa9..df56527a9b 100644 --- a/windows/client-management/mdm/defender-csp.md +++ b/windows/client-management/mdm/defender-csp.md @@ -229,6 +229,14 @@ Information about the execution status of the threat. The data type is integer. +The following list shows the supported values: + +- 0 = Unknown +- 1 = Blocked +- 2 = Allowed +- 3 = Executing +- 4 = Not executing + Supported operation is Get. **Detections/*ThreatId*/InitialDetectionTime** From 82010532d5fd8535154e0b0db63a7ab64bd4c1f6 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 18 Mar 2022 15:18:35 -0700 Subject: [PATCH 2/3] Update defender-csp.md --- windows/client-management/mdm/defender-csp.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/defender-csp.md b/windows/client-management/mdm/defender-csp.md index df56527a9b..f514676cbe 100644 --- a/windows/client-management/mdm/defender-csp.md +++ b/windows/client-management/mdm/defender-csp.md @@ -234,8 +234,8 @@ The following list shows the supported values: - 0 = Unknown - 1 = Blocked - 2 = Allowed -- 3 = Executing -- 4 = Not executing +- 3 = Running +- 4 = Not running Supported operation is Get. From 10a7604a12419815db4f219ff048e96aef168ebf Mon Sep 17 00:00:00 2001 From: Thomas Raya Date: Mon, 21 Mar 2022 08:14:30 -0700 Subject: [PATCH 3/3] Revert "Policy CSP : Search/DisableSearch update" --- .../policy-configuration-service-provider.md | 5 +- .../mdm/policy-csp-search.md | 57 +------------------ 2 files changed, 2 insertions(+), 60 deletions(-) diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 88bfae707f..db53557678 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -70,7 +70,7 @@ Policy

Supported operation is Get. **Policy/Config** -

Node for grouping all policies configured by one source. The configuration source can use this path to set policy values and later query any policy value that it previously set. One policy can be configured by multiple configuration sources. If a configuration source wants to query the result of conflict resolution (for example, if Exchange and MDM both attempt to set a value) the configuration source can use the Policy/Result path to retrieve the resulting value. +

Node for grouping all policies configured by one source. The configuration source can use this path to set policy values and later query any policy value that it previously set. One policy can be configured by multiple configuration sources. If a configuration source wants to query the result of conflict resolution (for example, if Exchange and MDM both attempt to set a value,) the configuration source can use the Policy/Result path to retrieve the resulting value.

Supported operation is Get. @@ -8360,9 +8360,6 @@ dfsdiscoverdc">ADMX_DFS/DFSDiscoverDC

Search/DisableRemovableDriveIndexing
-
- Search/DisableSearch -
Search/DoNotUseWebResults
diff --git a/windows/client-management/mdm/policy-csp-search.md b/windows/client-management/mdm/policy-csp-search.md index 7e5ea07001..5c7775b5f5 100644 --- a/windows/client-management/mdm/policy-csp-search.md +++ b/windows/client-management/mdm/policy-csp-search.md @@ -57,9 +57,6 @@ manager: dansimp
Search/DisableRemovableDriveIndexing
-
- Search/DisableSearch -
Search/DoNotUseWebResults
@@ -632,58 +629,6 @@ The following list shows the supported values:
- -**Search/DisableSearch** - - - -|Edition|Windows 10|Windows 11| -|--- |--- |--- | -|Home|No|No| -|Pro|No|Yes| -|Business|No|Yes| -|Enterprise|No|Yes| -|Education|No|Yes| - - -
- - -[Scope](./policy-configuration-service-provider.md#policy-scope): - -> [!div class = "checklist"] -> * Device - -
- - - -This policy setting completely disables Search UI and all its entry points such as keyboard shortcuts and touch-pad gestures. - -It removes the Search button from the Taskbar and the corresponding option in the Settings. It also disables type-to-search in the Start menu and removes the Start menu's search box. - - - -ADMX Info: - -- GP Friendly name: *Fully disable Search UI* -- GP name: *DisableSearch* -- GP path: *Windows Components/Search* -- GP ADMX file name: *Search.admx* - - - -The following list shows the supported values: - -- 0 (default) – Do not disable search. -- 1 – Disable search. - - - - -
- - **Search/DoNotUseWebResults** @@ -816,7 +761,7 @@ The following list shows the supported values: -If enabled, clients will be unable to query this computer's index remotely. Thus, when they are browsing network shares that are stored on this computer, they will not search them using the index. If disabled, client search requests will use this computer's index. +If enabled, clients will be unable to query this computer's index remotely. Thus, when they are browsing network shares that are stored on this computer, they will not search them using the index. If disabled, client search requests will use this computer's index..