Update enable-exploit-protection.md

This commit is contained in:
Denise Vangel-MSFT 2020-01-08 15:29:11 -08:00
parent df9a6bf6c4
commit 2007648296

View File

@ -25,6 +25,9 @@ manager: dansimp
[Exploit protection](exploit-protection.md) helps protect against malware that uses exploits to infect devices and spread. Exploit protection consists of a number of mitigations that can be applied to either the operating system or individual apps.
> [!IMPORTANT]
> .NET 2.0 is not compatible with some exploit protection capabilities, specifically, Export Address Filtering (EAF) and Import Address Filtering (IAF). If you have enabled .NET 2.0, usage of EAF and IAF are not supported.
Many features from the Enhanced Mitigation Experience Toolkit (EMET) are included in exploit protection.
You can enable each mitigation separately by using any of these methods:
@ -36,10 +39,7 @@ You can enable each mitigation separately by using any of these methods:
- [Group Policy](#group-policy)
- [PowerShell](#powershell)
They are configured by default in Windows 10.
You can set each mitigation to on, off, or to its default value.
Some mitigations have additional options.
Exploit protection is configured by default in Windows 10. You can set each mitigation to on, off, or to its default value. Some mitigations have additional options.
You can [export these settings as an XML file](import-export-exploit-protection-emet-xml.md) and deploy them to other machines.