From 1e1aa93e8d237cd0f37008a5b7d167594b2413f8 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Mon, 23 Mar 2020 19:29:34 +0200 Subject: [PATCH] update screenshot and missing feature description https://github.com/MicrosoftDocs/windows-itpro-docs/issues/6054 --- .../credential-guard/credential-guard-manage.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/credential-guard/credential-guard-manage.md b/windows/security/identity-protection/credential-guard/credential-guard-manage.md index 036ce84b5d..8689df14dc 100644 --- a/windows/security/identity-protection/credential-guard/credential-guard-manage.md +++ b/windows/security/identity-protection/credential-guard/credential-guard-manage.md @@ -37,10 +37,11 @@ You can use Group Policy to enable Windows Defender Credential Guard. This will 2. Double-click **Turn On Virtualization Based Security**, and then click the **Enabled** option. 3. In the **Select Platform Security Level** box, choose **Secure Boot** or **Secure Boot and DMA Protection**. 4. In the **Credential Guard Configuration** box, click **Enabled with UEFI lock**, and then click **OK**. If you want to be able to turn off Windows Defender Credential Guard remotely, choose **Enabled without lock**. +5. In the **Secure Launch Configuration** box, choose **Not Configured**, **Enabled** or **Disabled**. Check [this article](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection) for more details. - ![Windows Defender Credential Guard Group Policy setting](images/credguard-gp.png) + ![Windows Defender Credential Guard Group Policy setting](https://user-images.githubusercontent.com/41186174/77344405-c7c07b80-6d3b-11ea-96ad-4c1d6bfd4330.png) -5. Close the Group Policy Management Console. +6. Close the Group Policy Management Console. To enforce processing of the group policy, you can run ```gpupdate /force```.