deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-14 14:27:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Fixed line breaks

Browse Source
This commit is contained in:
Lars Iwer 2016-10-27 15:12:43 -07:00
parent 39abfb24d5
commit 1bb4cebcd3
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
windows/keep-secure/credential-guard.md
View File

@ -105,6 +105,7 @@ Credential Guard can be enabled by using Group Policy, the registry, or the Devi
### Turn on Credential Guard by using Group Policy ### Turn on Credential Guard by using Group Policy
You can use Group Policy to enable Credential Guard. This will add and enable the virtualization-based security features for you if needed. You can use Group Policy to enable Credential Guard. This will add and enable the virtualization-based security features for you if needed.
1. From the Group Policy Management Console, go to **Computer Configuration** -> **Administrative Templates** -> **System** -> **Device Guard**. 1. From the Group Policy Management Console, go to **Computer Configuration** -> **Administrative Templates** -> **System** -> **Device Guard**.
2. Double-click **Turn On Virtualization Based Security**, and then click the **Enabled** option. 2. Double-click **Turn On Virtualization Based Security**, and then click the **Enabled** option.
3. **Select Platform Security Level** box, choose **Secure Boot** or **Secure Boot and DMA Protection**. 3. **Select Platform Security Level** box, choose **Secure Boot** or **Secure Boot and DMA Protection**.
@ -130,6 +131,7 @@ You can do this by using either the Control Panel or the Deployment Image Servic
> If you enable Credential Guard by using Group Policy, these steps are not required. Group Policy will install the features for you. > If you enable Credential Guard by using Group Policy, these steps are not required. Group Policy will install the features for you.
   
**Add the virtualization-based security features by using Programs and Features** **Add the virtualization-based security features by using Programs and Features**
1. Open the Programs and Features control panel. 1. Open the Programs and Features control panel.
2. Click **Turn Windows feature on or off**. 2. Click **Turn Windows feature on or off**.
3. Go to **Hyper-V** -> **Hyper-V Platform**, and then select the **Hyper-V Hypervisor** check box. 3. Go to **Hyper-V** -> **Hyper-V Platform**, and then select the **Hyper-V Hypervisor** check box.
@ -137,6 +139,7 @@ You can do this by using either the Control Panel or the Deployment Image Servic
5. Click **OK**. 5. Click **OK**.
**Add the virtualization-based security features to an offline image by using DISM** **Add the virtualization-based security features to an offline image by using DISM**
1. Open an elevated command prompt. 1. Open an elevated command prompt.
2. Add the Hyper-V Hypervisor by running the following command: 2. Add the Hyper-V Hypervisor by running the following command:
``` syntax ``` syntax
@ -177,6 +180,7 @@ DG_Readiness_Tool_v2.0.ps1 -Enable -AutoReboot
``` ```
### Credential Guard deployment in virtual machines ### Credential Guard deployment in virtual machines
Credential Guard can protect secrets in a Hyper-V virtual machine, just as it would a physical machine. The enablement steps are the same from within the virtual machine. Credential Guard can protect secrets in a Hyper-V virtual machine, just as it would a physical machine. The enablement steps are the same from within the virtual machine.
Credential Guard protects secrets from non-priviledged access inside the VM. It does not provide additional protection from the host administrator. From the host, you can disable Credential Guard for a virtual machine: Credential Guard protects secrets from non-priviledged access inside the VM. It does not provide additional protection from the host administrator. From the host, you can disable Credential Guard for a virtual machine: