From 3164cb3eb0f3b5eb08752a818981f4e636684643 Mon Sep 17 00:00:00 2001 From: Vinay Pamnani <37223378+vinaypamnani-msft@users.noreply.github.com> Date: Tue, 11 Jul 2023 11:30:05 -0400 Subject: [PATCH] Update metadata --- .../configure-md-app-guard.md | 17 +------- .../faq-md-app-guard.yml | 12 +----- .../install-md-app-guard.md | 15 +------ .../md-app-guard-browser-extension.md | 14 +------ .../md-app-guard-overview.md | 17 +------- .../reqs-md-app-guard.md | 13 +----- .../test-scenarios-md-app-guard.md | 14 +------ windows/security/docfx.json | 41 ++++++++++++++----- ...tion-based-protection-of-code-integrity.md | 20 +++------ ...sed-root-of-trust-helps-protect-windows.md | 20 +++------ .../kernel-dma-protection-for-thunderbolt.md | 7 ---- ...-guard-secure-launch-and-smm-protection.md | 15 ------- .../get-support-for-security-baselines.md | 8 +--- .../mbsa-removal-and-guidance.md | 7 +--- .../security-compliance-toolkit-10.md | 8 +--- .../windows-security-baselines.md | 8 +--- 16 files changed, 54 insertions(+), 182 deletions(-) diff --git a/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard.md b/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard.md index 143466fe17..93ffec5801 100644 --- a/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard.md +++ b/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard.md @@ -1,28 +1,13 @@ --- title: Configure the Group Policy settings for Microsoft Defender Application Guard description: Learn about the available Group Policy settings for Microsoft Defender Application Guard. -ms.prod: windows-client -ms.mktglfcycl: manage -ms.sitesec: library -ms.pagetype: security ms.localizationpriority: medium -author: vinaypamnani-msft -ms.author: vinpa -ms.date: 08/22/2022 -ms.reviewer: -manager: aaroncz -ms.custom: sasr -ms.technology: itpro-security +ms.date: 07/11/2023 ms.topic: how-to --- # Configure Microsoft Defender Application Guard policy settings -**Applies to:** - -- Windows 10 -- Windows 11 - Microsoft Defender Application Guard (Application Guard) works with Group Policy to help you manage your organization's computer settings. By using Group Policy, you can configure a setting once, and then copy it onto many computers. For example, you can set up multiple security settings in a Group Policy Object, which is linked to a domain, and then apply all those settings to every endpoint in the domain. Application Guard uses both network isolation and application-specific settings. diff --git a/windows/security/application-security/application-isolation/microsoft-defender-application-guard/faq-md-app-guard.yml b/windows/security/application-security/application-isolation/microsoft-defender-application-guard/faq-md-app-guard.yml index 165b3451e3..370243790a 100644 --- a/windows/security/application-security/application-isolation/microsoft-defender-application-guard/faq-md-app-guard.yml +++ b/windows/security/application-security/application-isolation/microsoft-defender-application-guard/faq-md-app-guard.yml @@ -2,19 +2,9 @@ metadata: title: FAQ - Microsoft Defender Application Guard (Windows 10) description: Learn about the commonly asked questions and answers for Microsoft Defender Application Guard. - ms.mktglfcycl: manage - ms.sitesec: library - ms.pagetype: security ms.localizationpriority: medium - ms.prod: windows-client - ms.technology: itpro-security - author: vinaypamnani-msft - ms.author: vinpa - ms.reviewer: - manager: aaroncz - ms.custom: asr ms.topic: faq - ms.date: 12/31/2017 + ms.date: 07/11/2023 title: Frequently asked questions - Microsoft Defender Application Guard summary: | diff --git a/windows/security/application-security/application-isolation/microsoft-defender-application-guard/install-md-app-guard.md b/windows/security/application-security/application-isolation/microsoft-defender-application-guard/install-md-app-guard.md index 6f0853d443..eeac8ba0d1 100644 --- a/windows/security/application-security/application-isolation/microsoft-defender-application-guard/install-md-app-guard.md +++ b/windows/security/application-security/application-isolation/microsoft-defender-application-guard/install-md-app-guard.md @@ -1,22 +1,11 @@ --- title: Enable hardware-based isolation for Microsoft Edge description: Learn about the Microsoft Defender Application Guard modes (Standalone or Enterprise-managed), and how to install Application Guard in your enterprise. -ms.prod: windows-client -ms.localizationpriority: medium -author: vinaypamnani-msft -ms.author: vinpa -ms.date: 11/30/2022 -ms.reviewer: -manager: aaroncz -ms.custom: asr -ms.technology: itpro-security -appliesto: - - ✅ Windows 10 - - ✅ Windows 11 +ms.date: 07/11/2023 +ms.topic: how-to ms.collection: - highpri - tier2 -ms.topic: how-to --- # Prepare to install Microsoft Defender Application Guard diff --git a/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-browser-extension.md b/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-browser-extension.md index 0f2bca60b2..b5b54f3574 100644 --- a/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-browser-extension.md +++ b/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-browser-extension.md @@ -1,25 +1,13 @@ --- title: Microsoft Defender Application Guard Extension description: Learn about the Microsoft Defender Application Guard browser extension, which extends Application Guard's protection to more web browsers. -ms.prod: windows-client ms.localizationpriority: medium -author: vinaypamnani-msft -ms.author: vinpa -ms.date: 09/09/2021 -ms.reviewer: -manager: aaroncz -ms.custom: asr -ms.technology: itpro-security +ms.date: 07/11/2023 ms.topic: conceptual --- # Microsoft Defender Application Guard Extension -**Applies to:** - -- Windows 10 -- Windows 11 - [Microsoft Defender Application Guard Extension](https://www.microsoft.com/security/blog/2019/05/23/new-browser-extensions-for-integrating-microsofts-hardware-based-isolation/) is a web browser add-on available for [Chrome](https://chrome.google.com/webstore/detail/application-guard-extensi/mfjnknhkkiafjajicegabkbimfhplplj/) and [Firefox](https://addons.mozilla.org/en-US/firefox/addon/application-guard-extension/). [Microsoft Defender Application Guard](md-app-guard-overview.md) provides Hyper-V isolation on Windows 10 and Windows 11, to protect users from potentially harmful content on the web. The extension helps Application Guard protect users running other web browsers. diff --git a/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview.md b/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview.md index 7df26ec975..d1547ce21e 100644 --- a/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview.md +++ b/windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview.md @@ -1,18 +1,8 @@ --- title: Microsoft Defender Application Guard description: Learn about Microsoft Defender Application Guard and how it helps combat malicious content and malware out on the Internet. -ms.prod: windows-client -ms.mktglfcycl: manage -ms.sitesec: library -ms.pagetype: security ms.localizationpriority: medium -author: vinaypamnani-msft -ms.author: vinpa -ms.date: 05/01/2023 -ms.reviewer: -manager: aaroncz -ms.custom: asr -ms.technology: itpro-security +ms.date: 07/11/2023 ms.collection: - highpri - tier2 @@ -21,11 +11,6 @@ ms.topic: conceptual # Microsoft Defender Application Guard overview -**Applies to** - -- Windows 10 -- Windows 11 - Microsoft Defender Application Guard (MDAG) is designed to help prevent old and newly emerging attacks to help keep employees productive. Using our unique hardware isolation approach, our goal is to destroy the playbook that attackers use by making current attack methods obsolete. ## What is Application Guard and how does it work? diff --git a/windows/security/application-security/application-isolation/microsoft-defender-application-guard/reqs-md-app-guard.md b/windows/security/application-security/application-isolation/microsoft-defender-application-guard/reqs-md-app-guard.md index f8cbef2b18..190662392c 100644 --- a/windows/security/application-security/application-isolation/microsoft-defender-application-guard/reqs-md-app-guard.md +++ b/windows/security/application-security/application-isolation/microsoft-defender-application-guard/reqs-md-app-guard.md @@ -1,24 +1,13 @@ --- title: System requirements for Microsoft Defender Application Guard description: Learn about the system requirements for installing and running Microsoft Defender Application Guard. -ms.prod: windows-client -ms.technology: itpro-security ms.topic: overview ms.localizationpriority: medium -author: vinaypamnani-msft -ms.author: vinpa -ms.date: 08/25/2022 -ms.reviewer: sazankha -manager: aaroncz +ms.date: 07/11/2023 --- # System requirements for Microsoft Defender Application Guard -**Applies to** - -- Windows 10 Education, Enterprise, and Professional -- Windows 11 Education, Enterprise, and Professional - The threat landscape is continually evolving. While hackers are busy developing new techniques to breach enterprise networks by compromising workstations, phishing schemes remain one of the top ways to lure employees into social engineering attacks. Microsoft Defender Application Guard is designed to help prevent old, and newly emerging attacks, to help keep employees productive. > [!NOTE] diff --git a/windows/security/application-security/application-isolation/microsoft-defender-application-guard/test-scenarios-md-app-guard.md b/windows/security/application-security/application-isolation/microsoft-defender-application-guard/test-scenarios-md-app-guard.md index 002320e3a5..03756108fa 100644 --- a/windows/security/application-security/application-isolation/microsoft-defender-application-guard/test-scenarios-md-app-guard.md +++ b/windows/security/application-security/application-isolation/microsoft-defender-application-guard/test-scenarios-md-app-guard.md @@ -1,25 +1,13 @@ --- title: Testing scenarios with Microsoft Defender Application Guard description: Suggested testing scenarios for Microsoft Defender Application Guard, showing how it works in both Standalone and Enterprise-managed mode. -ms.prod: windows-client -ms.technology: itpro-security ms.localizationpriority: medium -author: vinaypamnani-msft -ms.author: vinpa -ms.reviewer: sazankha -manager: aaroncz -ms.date: 09/23/2022 -ms.custom: asr +ms.date: 07/11/2023 ms.topic: conceptual --- # Application Guard testing scenarios -**Applies to:** - -- Windows 10 -- Windows 11 - We've come up with a list of scenarios that you can use to test hardware-based isolation in your organization. ## Application Guard in standalone mode diff --git a/windows/security/docfx.json b/windows/security/docfx.json index fe41572eb6..29db66be39 100644 --- a/windows/security/docfx.json +++ b/windows/security/docfx.json @@ -73,8 +73,11 @@ }, "fileMetadata": { "author":{ + "application-security//**/*.md": "vinaypamnani-msft", + "application-security//**/*.yml": "vinaypamnani-msft", "application-security/application-control/user-account-control/*.md": "paolomatarazzo", - "application-security/application-isolation/windows-sandbox/**/*.md": "vinaypamnani-msft", + "hardware-security/**/*.md": "vinaypamnani-msft", + "hardware-security/**/*.yml": "vinaypamnani-msft", "identity-protection/**/*.md": "paolomatarazzo", "identity-protection/**/*.yml": "paolomatarazzo", "operating-system-security/**/*.md": "vinaypamnani-msft", @@ -87,9 +90,12 @@ "operating-system-security/network-security/windows-firewall/**/*.yml": "ngangulyms" }, "ms.author":{ + "application-security//**/*.md": "vinpa", + "application-security//**/*.yml": "vinpa", "application-security/application-control/user-account-control/*.md": "paoloma", "application-security/application-control/user-account-control/*.yml": "paoloma", - "application-security/application-isolation/windows-sandbox/**/*.md": "vinpa", + "hardware-security//**/*.md": "vinpa", + "hardware-security//**/*.yml": "vinpa", "identity-protection/**/*.md": "paoloma", "identity-protection/**/*.yml": "paoloma", "operating-system-security/**/*.md": "vinpa", @@ -109,7 +115,18 @@ "✅ Windows Server 2019", "✅ Windows Server 2016" ], - "application-security/application-isolation/windows-sandbox/**/*.md": [ + "application-security//**/*.md": [ + "✅ Windows 11", + "✅ Windows 10" + ], + "application-security/application-control/user-account-control/**/*.md": [ + "✅ Windows 11", + "✅ Windows 10", + "✅ Windows Server 2022", + "✅ Windows Server 2019", + "✅ Windows Server 2016" + ], + "hardware-security//**/*.md": [ "✅ Windows 11", "✅ Windows 10" ], @@ -131,13 +148,6 @@ "✅ Windows Server 2019", "✅ Windows Server 2016" ], - "identity-protection/user-account-control/**/*.md": [ - "✅ Windows 11", - "✅ Windows 10", - "✅ Windows Server 2022", - "✅ Windows Server 2019", - "✅ Windows Server 2016" - ], "identity-protection/virtual-smart-cards/**/*.md": [ "✅ Windows 11", "✅ Windows 10", @@ -169,6 +179,13 @@ "operating-system-security/data-protection/personal-data-encryption/*.yml": [ "✅ Windows 11" ], + "operating-system-security/device-management/windows-security-configuration-framework/**/*.md": [ + "✅ Windows 11", + "✅ Windows 10", + "✅ Windows Server 2022", + "✅ Windows Server 2019", + "✅ Windows Server 2016" + ], "operating-system-security/network-security/windows-firewall/**/*.md": [ "✅ Windows 11", "✅ Windows 10", @@ -178,12 +195,14 @@ ] }, "ms.reviewer": { + "application-security/application-isolation/microsoft-defender-application-guard/*.md": "sazankha", "identity-protection/hello-for-business/*.md": "erikdau", "identity-protection/credential-guard/*.md": "zwhittington", "identity-protection/access-control/*.md": "sulahiri", "operating-system-security/network-security/windows-firewall/*.md": "paoloma", "operating-system-security/network-security/vpn/*.md": "pesmith", - "operating-system-security/data-protection/personal-data-encryption/*.md":"rhonnegowda" + "operating-system-security/data-protection/personal-data-encryption/*.md":"rhonnegowda", + "operating-system-security/device-management/windows-security-configuration-framework/*.md": "jmunck" }, "ms.collection": { "identity-protection/hello-for-business/*.md": "tier1", diff --git a/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md b/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md index 6ae7fafa09..eaba7bb890 100644 --- a/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md +++ b/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity.md @@ -1,30 +1,22 @@ --- title: Enable memory integrity description: This article explains the steps to opt in to using memory integrity on Windows devices. -ms.prod: windows-client -ms.mktglfcycl: deploy ms.localizationpriority: medium -ms.author: vinpa -author: vinaypamnani-msft -manager: aaroncz -audience: ITPro ms.collection: - highpri - tier2 ms.topic: conceptual ms.date: 03/16/2023 -ms.reviewer: -ms.technology: itpro-security +appliesto: + - "✅ Windows 11" + - "✅ Windows 10" + - "✅ Windows Server 2022" + - "✅ Windows Server 2019" + - "✅ Windows Server 2016" --- # Enable virtualization-based protection of code integrity -**Applies to** - -- Windows 10 -- Windows 11 -- Windows Server 2016 or higher - **Memory integrity** is a virtualization-based security (VBS) feature available in Windows. Memory integrity and VBS improve the threat model of Windows and provide stronger protections against malware trying to exploit the Windows kernel. VBS uses the Windows hypervisor to create an isolated virtual environment that becomes the root of trust of the OS that assumes the kernel can be compromised. Memory integrity is a critical component that protects and hardens Windows by running kernel mode code integrity within the isolated virtual environment of VBS. Memory integrity also restricts kernel memory allocations that could be used to compromise the system. > [!NOTE] diff --git a/windows/security/hardware-security/how-hardware-based-root-of-trust-helps-protect-windows.md b/windows/security/hardware-security/how-hardware-based-root-of-trust-helps-protect-windows.md index ad921749be..077e6473de 100644 --- a/windows/security/hardware-security/how-hardware-based-root-of-trust-helps-protect-windows.md +++ b/windows/security/hardware-security/how-hardware-based-root-of-trust-helps-protect-windows.md @@ -1,23 +1,16 @@ --- -title: How a Windows Defender System Guard helps protect Windows 10 -description: Windows Defender System Guard reorganizes the existing Windows 10 system integrity features under one roof. Learn how it works. -ms.reviewer: -manager: aaroncz -ms.author: vinpa -search.appverid: met150 -ms.prod: windows-client +title: How a Windows Defender System Guard helps protect Windows +description: Windows Defender System Guard reorganizes the existing Windows system integrity features under one roof. Learn how it works. ms.localizationpriority: medium -author: vinaypamnani-msft ms.date: 03/01/2019 -ms.technology: itpro-security ms.topic: conceptual --- -# Windows Defender System Guard: How a hardware-based root of trust helps protect Windows 10 +# Windows Defender System Guard: How a hardware-based root of trust helps protect Windows To protect critical resources such as the Windows authentication stack, single sign-on tokens, the Windows Hello biometric stack, and the Virtual Trusted Platform Module, a system's firmware and hardware must be trustworthy. -Windows Defender System Guard reorganizes the existing Windows 10 system integrity features under one roof and sets up the next set of investments in Windows security. It's designed to make these security guarantees: +Windows Defender System Guard reorganizes the existing Windows system integrity features under one roof and sets up the next set of investments in Windows security. It's designed to make these security guarantees: - Protect and maintain the integrity of the system as it starts up - Validate that system integrity has truly been maintained through local and remote attestation @@ -48,7 +41,6 @@ Also, a bug fix for UEFI code can take a long time to design, build, retest, val DRTM lets the system freely boot into untrusted code initially, but shortly after launches the system into a trusted state by taking control of all CPUs and forcing them down a well-known and measured code path. This has the benefit of allowing untrusted early UEFI code to boot the system, but then being able to securely transition into a trusted and measured state. - ![System Guard Secure Launch.](images/system-guard-secure-launch.png) Secure Launch simplifies management of SRTM measurements because the launch code is now unrelated to a specific hardware configuration. This means the number of valid code measurements is small, and future updates can be deployed more widely and quickly. @@ -61,8 +53,8 @@ SMM code executes in the highest privilege level and is invisible to the OS, whi To defend against this, two techniques are used: - - Paging protection to prevent inappropriate access to code and data - - SMM hardware supervision and attestation +- Paging protection to prevent inappropriate access to code and data +- SMM hardware supervision and attestation Paging protection can be implemented to lock certain code tables to be read-only to prevent tampering. This prevents access to any memory that hasn't been assigned. diff --git a/windows/security/hardware-security/kernel-dma-protection-for-thunderbolt.md b/windows/security/hardware-security/kernel-dma-protection-for-thunderbolt.md index 9e21e33e3d..78cb720fe3 100644 --- a/windows/security/hardware-security/kernel-dma-protection-for-thunderbolt.md +++ b/windows/security/hardware-security/kernel-dma-protection-for-thunderbolt.md @@ -1,18 +1,11 @@ --- title: Kernel DMA Protection description: Learn how Kernel DMA Protection protects Windows devices against drive-by Direct Memory Access (DMA) attacks using PCI hot plug devices. -ms.prod: windows-client -author: vinaypamnani-msft -ms.author: vinpa -manager: aaroncz ms.collection: - highpri - tier1 ms.topic: conceptual ms.date: 03/30/2023 -ms.technology: itpro-security -appliesto: - - ✅ Windows 10 and later --- # Kernel DMA Protection diff --git a/windows/security/hardware-security/system-guard-secure-launch-and-smm-protection.md b/windows/security/hardware-security/system-guard-secure-launch-and-smm-protection.md index a56b108a79..f1eb60e4e7 100644 --- a/windows/security/hardware-security/system-guard-secure-launch-and-smm-protection.md +++ b/windows/security/hardware-security/system-guard-secure-launch-and-smm-protection.md @@ -1,28 +1,13 @@ --- title: System Guard Secure Launch and SMM protection description: Explains how to configure System Guard Secure Launch and System Management Mode (SMM protection) to improve the startup security of Windows 10 devices. -search.appverid: met150 -ms.prod: windows-client -ms.mktglfcycl: deploy -ms.sitesec: library -ms.pagetype: security ms.localizationpriority: medium -author: vinaypamnani-msft ms.date: 11/30/2021 -ms.reviewer: -manager: aaroncz -ms.author: vinpa -ms.technology: itpro-security ms.topic: conceptual --- # System Guard Secure Launch and SMM protection -**Applies to:** - -- Windows 11 -- Windows 10 - This topic explains how to configure [System Guard Secure Launch and System Management Mode (SMM) protection](how-hardware-based-root-of-trust-helps-protect-windows.md) to improve the startup security of Windows 10 and Windows 11 devices. The information below is presented from a client perspective. > [!NOTE] diff --git a/windows/security/operating-system-security/device-management/windows-security-configuration-framework/get-support-for-security-baselines.md b/windows/security/operating-system-security/device-management/windows-security-configuration-framework/get-support-for-security-baselines.md index cb6fa4d054..25675c2123 100644 --- a/windows/security/operating-system-security/device-management/windows-security-configuration-framework/get-support-for-security-baselines.md +++ b/windows/security/operating-system-security/device-management/windows-security-configuration-framework/get-support-for-security-baselines.md @@ -1,15 +1,9 @@ --- title: Get support for security baselines description: Find answers to frequently asked question on how to get support for baselines, the Security Compliance Toolkit (SCT), and related articles. -ms.prod: windows-client ms.localizationpriority: medium -ms.author: vinpa -author: vinaypamnani-msft -manager: aaroncz ms.topic: conceptual -ms.date: 10/19/2022 -ms.reviewer: jmunck -ms.technology: itpro-security +ms.date: 07/11/2023 --- # Get Support diff --git a/windows/security/operating-system-security/device-management/windows-security-configuration-framework/mbsa-removal-and-guidance.md b/windows/security/operating-system-security/device-management/windows-security-configuration-framework/mbsa-removal-and-guidance.md index 5340832bed..8faa272dca 100644 --- a/windows/security/operating-system-security/device-management/windows-security-configuration-framework/mbsa-removal-and-guidance.md +++ b/windows/security/operating-system-security/device-management/windows-security-configuration-framework/mbsa-removal-and-guidance.md @@ -1,13 +1,8 @@ --- title: Guide to removing Microsoft Baseline Security Analyzer (MBSA) description: This article documents the removal of Microsoft Baseline Security Analyzer (MBSA) and provides alternative solutions. -ms.prod: windows-client ms.localizationpriority: medium -ms.author: paoloma -author: paolomatarazzo -manager: aaroncz -ms.technology: itpro-security -ms.date: 03/29/2023 +ms.date: 07/11/2023 ms.topic: article --- diff --git a/windows/security/operating-system-security/device-management/windows-security-configuration-framework/security-compliance-toolkit-10.md b/windows/security/operating-system-security/device-management/windows-security-configuration-framework/security-compliance-toolkit-10.md index 66e75d737f..b145f9c722 100644 --- a/windows/security/operating-system-security/device-management/windows-security-configuration-framework/security-compliance-toolkit-10.md +++ b/windows/security/operating-system-security/device-management/windows-security-configuration-framework/security-compliance-toolkit-10.md @@ -1,18 +1,12 @@ --- title: Microsoft Security Compliance Toolkit Guide description: This article describes how to use Security Compliance Toolkit in your organization -ms.prod: windows-client ms.localizationpriority: medium -ms.author: vinpa -author: vinaypamnani-msft -manager: aaroncz ms.collection: - highpri - tier3 ms.topic: conceptual -ms.date: 06/07/2023 -ms.reviewer: rmunck -ms.technology: itpro-security +ms.date: 07/11/2023 --- # Microsoft Security Compliance Toolkit - How to use diff --git a/windows/security/operating-system-security/device-management/windows-security-configuration-framework/windows-security-baselines.md b/windows/security/operating-system-security/device-management/windows-security-configuration-framework/windows-security-baselines.md index 33a8c29d1f..63b6cae99b 100644 --- a/windows/security/operating-system-security/device-management/windows-security-configuration-framework/windows-security-baselines.md +++ b/windows/security/operating-system-security/device-management/windows-security-configuration-framework/windows-security-baselines.md @@ -1,18 +1,12 @@ --- title: Security baselines guide description: Learn how to use security baselines in your organization. -ms.prod: windows-client ms.localizationpriority: medium -ms.author: vinpa -author: vinaypamnani-msft -manager: aaroncz ms.collection: - highpri - tier3 ms.topic: conceptual -ms.date: 01/26/2022 -ms.reviewer: jmunck -ms.technology: itpro-security +ms.date: 07/11/2023 --- # Security baselines