mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-19 12:23:37 +00:00
Merge branch 'master' of https://github.com/Microsoft/windows-itpro-docs
This commit is contained in:
@ -23,7 +23,7 @@ MDOP Group Policy templates are available for download in a self-extracting, com
|
|||||||
**How to download and deploy the MDOP Group Policy templates**
|
**How to download and deploy the MDOP Group Policy templates**
|
||||||
|
|
||||||
1. Download the MDOP Group Policy templates from [Microsoft Desktop Optimization Pack Group Policy Administrative Templates
|
1. Download the MDOP Group Policy templates from [Microsoft Desktop Optimization Pack Group Policy Administrative Templates
|
||||||
](https://www.microsoft.com/en-us/download/details.aspx?id=54957).
|
](https://www.microsoft.com/en-us/download/details.aspx?id=55531).
|
||||||
|
|
||||||
2. Run the downloaded file to extract the template folders.
|
2. Run the downloaded file to extract the template folders.
|
||||||
|
|
||||||
|
@ -38,7 +38,9 @@ Unless your use scenarios explicitly require them, Microsoft recommends that you
|
|||||||
- csi.exe
|
- csi.exe
|
||||||
- dnx.exe
|
- dnx.exe
|
||||||
- fsi.exe
|
- fsi.exe
|
||||||
|
- fsiAnyCpu.exe
|
||||||
- kd.exe
|
- kd.exe
|
||||||
|
- ntkd.exe
|
||||||
- lxssmanager.dll
|
- lxssmanager.dll
|
||||||
- msbuild.exe<sup>[1]</sup>
|
- msbuild.exe<sup>[1]</sup>
|
||||||
- mshta.exe
|
- mshta.exe
|
||||||
@ -59,6 +61,7 @@ Unless your use scenarios explicitly require them, Microsoft recommends that you
|
|||||||
|Matt Graeber | @mattifestation|
|
|Matt Graeber | @mattifestation|
|
||||||
|Matt Nelson | @enigma0x3|
|
|Matt Nelson | @enigma0x3|
|
||||||
|Oddvar Moe |@Oddvarmoe|
|
|Oddvar Moe |@Oddvarmoe|
|
||||||
|
|Alex Ionescu | @aionescu|
|
||||||
|
|
||||||
<br />
|
<br />
|
||||||
|
|
||||||
@ -101,6 +104,7 @@ Microsoft recommends that you block the following Microsoft-signed applications
|
|||||||
<Deny ID="ID_DENY_BGINFO" FriendlyName="bginfo.exe" FileName="BGINFO.Exe" MinimumFileVersion = "4.21.0.0" />
|
<Deny ID="ID_DENY_BGINFO" FriendlyName="bginfo.exe" FileName="BGINFO.Exe" MinimumFileVersion = "4.21.0.0" />
|
||||||
<Deny ID="ID_DENY_CBD" FriendlyName="cdb.exe" FileName="CDB.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
|
<Deny ID="ID_DENY_CBD" FriendlyName="cdb.exe" FileName="CDB.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
|
||||||
<Deny ID="ID_DENY_KD" FriendlyName="kd.exe" FileName="kd.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
|
<Deny ID="ID_DENY_KD" FriendlyName="kd.exe" FileName="kd.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
|
||||||
|
<Deny ID="ID_DENY_NTKD" FriendlyName="ntkd.exe" FileName="ntkd.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
|
||||||
<Deny ID="ID_DENY_WINDBG" FriendlyName="windbg.exe" FileName="windbg.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
|
<Deny ID="ID_DENY_WINDBG" FriendlyName="windbg.exe" FileName="windbg.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
|
||||||
<Deny ID="ID_DENY_MSBUILD" FriendlyName="MSBuild.exe" FileName="MSBuild.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
|
<Deny ID="ID_DENY_MSBUILD" FriendlyName="MSBuild.exe" FileName="MSBuild.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
|
||||||
<Deny ID="ID_DENY_CSI" FriendlyName="csi.exe" FileName="csi.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
|
<Deny ID="ID_DENY_CSI" FriendlyName="csi.exe" FileName="csi.Exe" MinimumFileVersion = "65535.65535.65535.65535" />
|
||||||
@ -110,6 +114,7 @@ Microsoft recommends that you block the following Microsoft-signed applications
|
|||||||
<Deny ID="ID_DENY_LXSS" FriendlyName="LxssManager.dll" FileName="LxssManager.dll" MinimumFileVersion = "65535.65535.65535.65535" />
|
<Deny ID="ID_DENY_LXSS" FriendlyName="LxssManager.dll" FileName="LxssManager.dll" MinimumFileVersion = "65535.65535.65535.65535" />
|
||||||
<Deny ID="ID_DENY_BASH" FriendlyName="bash.exe" FileName="bash.exe" MinimumFileVersion = "65535.65535.65535.65535" />
|
<Deny ID="ID_DENY_BASH" FriendlyName="bash.exe" FileName="bash.exe" MinimumFileVersion = "65535.65535.65535.65535" />
|
||||||
<Deny ID="ID_DENY_FSI" FriendlyName="fsi.exe" FileName="fsi.exe" MinimumFileVersion = "65535.65535.65535.65535" />
|
<Deny ID="ID_DENY_FSI" FriendlyName="fsi.exe" FileName="fsi.exe" MinimumFileVersion = "65535.65535.65535.65535" />
|
||||||
|
<Deny ID="ID_DENY_FSI_ANYCPU" FriendlyName="fsiAnyCpu.exe" FileName="fsiAnyCpu.exe" MinimumFileVersion = "65535.65535.65535.65535" />
|
||||||
<Deny ID="ID_DENY_MSHTA" FriendlyName="mshta.exe" FileName="mshta.exe" MinimumFileVersion = "65535.65535.65535.65535" />
|
<Deny ID="ID_DENY_MSHTA" FriendlyName="mshta.exe" FileName="mshta.exe" MinimumFileVersion = "65535.65535.65535.65535" />
|
||||||
<Deny ID="ID_DENY_SMA" FriendlyName="System.Management.Automation.dll" FileName="System.Management.Automation.dll" MinimumFileVersion = "10.0.16215.999" />
|
<Deny ID="ID_DENY_SMA" FriendlyName="System.Management.Automation.dll" FileName="System.Management.Automation.dll" MinimumFileVersion = "10.0.16215.999" />
|
||||||
|
|
||||||
@ -166,6 +171,7 @@ Microsoft recommends that you block the following Microsoft-signed applications
|
|||||||
<FileRuleRef RuleID="ID_DENY_BGINFO"/>
|
<FileRuleRef RuleID="ID_DENY_BGINFO"/>
|
||||||
<FileRuleRef RuleID="ID_DENY_CBD"/>
|
<FileRuleRef RuleID="ID_DENY_CBD"/>
|
||||||
<FileRuleRef RuleID="ID_DENY_KD"/>
|
<FileRuleRef RuleID="ID_DENY_KD"/>
|
||||||
|
<FileRuleRef RuleID="ID_DENY_NTKD"/>
|
||||||
<FileRuleRef RuleID="ID_DENY_WINDBG"/>
|
<FileRuleRef RuleID="ID_DENY_WINDBG"/>
|
||||||
<FileRuleRef RuleID="ID_DENY_MSBUILD"/>
|
<FileRuleRef RuleID="ID_DENY_MSBUILD"/>
|
||||||
<FileRuleRef RuleID="ID_DENY_CSI"/>
|
<FileRuleRef RuleID="ID_DENY_CSI"/>
|
||||||
@ -175,6 +181,7 @@ Microsoft recommends that you block the following Microsoft-signed applications
|
|||||||
<FileRuleRef RuleID="ID_DENY_LXSS"/>
|
<FileRuleRef RuleID="ID_DENY_LXSS"/>
|
||||||
<FileRuleRef RuleID="ID_DENY_BASH"/>
|
<FileRuleRef RuleID="ID_DENY_BASH"/>
|
||||||
<FileRuleRef RuleID="ID_DENY_FSI"/>
|
<FileRuleRef RuleID="ID_DENY_FSI"/>
|
||||||
|
<FileRuleRef RuleID="ID_DENY_FSI_ANYCPU"/>
|
||||||
<FileRuleRef RuleID="ID_DENY_MSHTA"/>
|
<FileRuleRef RuleID="ID_DENY_MSHTA"/>
|
||||||
<FileRuleRef RuleID="ID_DENY_SMA"/>
|
<FileRuleRef RuleID="ID_DENY_SMA"/>
|
||||||
<FileRuleRef RuleID="ID_DENY_D_1" />
|
<FileRuleRef RuleID="ID_DENY_D_1" />
|
||||||
|
@ -18,7 +18,7 @@ author: iaanw
|
|||||||
|
|
||||||
**Applies to:**
|
**Applies to:**
|
||||||
|
|
||||||
- Windows 10, version 1703
|
- Windows 10
|
||||||
|
|
||||||
**Audience**
|
**Audience**
|
||||||
|
|
||||||
@ -150,4 +150,4 @@ See [Help secure Windows PCs with Endpoint Protection for Microsoft Intune](http
|
|||||||
- [Defender cmdlets](https://technet.microsoft.com/en-us/library/dn433280.aspx)
|
- [Defender cmdlets](https://technet.microsoft.com/en-us/library/dn433280.aspx)
|
||||||
- [Utilize Microsoft cloud-delivered protection in Windows Defender Antivirus](utilize-microsoft-cloud-protection-windows-defender-antivirus.md)
|
- [Utilize Microsoft cloud-delivered protection in Windows Defender Antivirus](utilize-microsoft-cloud-protection-windows-defender-antivirus.md)
|
||||||
- [How to create and deploy antimalware policies: Cloud-protection service](https://docs.microsoft.com/en-us/sccm/protect/deploy-use/endpoint-antimalware-policies#cloud-protection-service)
|
- [How to create and deploy antimalware policies: Cloud-protection service](https://docs.microsoft.com/en-us/sccm/protect/deploy-use/endpoint-antimalware-policies#cloud-protection-service)
|
||||||
- [Windows Defender Antivirus in Windows 10](windows-defender-antivirus-in-windows-10.md)
|
- [Windows Defender Antivirus in Windows 10](windows-defender-antivirus-in-windows-10.md)
|
||||||
|
Reference in New Issue
Block a user