mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-12 13:27:23 +00:00
MSSecurityGuide Policy CSP
This commit is contained in:
Vinay Pamnani
parent
1a13592a5b
commit
36be35cd75
@ -1,299 +1,342 @@
|
|||||||
---
|
---
|
||||||
title: Policy CSP - MSSecurityGuide
|
title: MSSecurityGuide Policy CSP
|
||||||
description: Learn how Policy CSP - MSSecurityGuide, an ADMX-backed policy, requires a special SyncML format to enable or disable.
|
description: Learn more about the MSSecurityGuide Area in Policy CSP.
|
||||||
|
author: vinaypamnani-msft
|
||||||
|
manager: aaroncz
|
||||||
ms.author: vinpa
|
ms.author: vinpa
|
||||||
ms.topic: article
|
ms.date: 02/17/2023
|
||||||
|
ms.localizationpriority: medium
|
||||||
ms.prod: windows-client
|
ms.prod: windows-client
|
||||||
ms.technology: itpro-manage
|
ms.technology: itpro-manage
|
||||||
author: vinaypamnani-msft
|
ms.topic: reference
|
||||||
ms.localizationpriority: medium
|
|
||||||
ms.date: 09/27/2019
|
|
||||||
ms.reviewer:
|
|
||||||
manager: aaroncz
|
|
||||||
---
|
---
|
||||||
|
|
||||||
|
<!-- Auto-Generated CSP Document -->
|
||||||
|
|
||||||
|
<!-- MSSecurityGuide-Begin -->
|
||||||
# Policy CSP - MSSecurityGuide
|
# Policy CSP - MSSecurityGuide
|
||||||
|
|
||||||
|
|
||||||
<hr/>
|
|
||||||
|
|
||||||
<!--Policies-->
|
|
||||||
## MSSecurityGuide policies
|
|
||||||
|
|
||||||
<dl>
|
|
||||||
<dd>
|
|
||||||
<a href="#mssecurityguide-applyuacrestrictionstolocalaccountsonnetworklogon">MSSecurityGuide/ApplyUACRestrictionsToLocalAccountsOnNetworkLogon</a>
|
|
||||||
</dd>
|
|
||||||
<dd>
|
|
||||||
<a href="#mssecurityguide-configuresmbv1clientdriver">MSSecurityGuide/ConfigureSMBV1ClientDriver</a>
|
|
||||||
</dd>
|
|
||||||
<dd>
|
|
||||||
<a href="#mssecurityguide-configuresmbv1server">MSSecurityGuide/ConfigureSMBV1Server</a>
|
|
||||||
</dd>
|
|
||||||
<dd>
|
|
||||||
<a href="#mssecurityguide-enablestructuredexceptionhandlingoverwriteprotection">MSSecurityGuide/EnableStructuredExceptionHandlingOverwriteProtection</a>
|
|
||||||
</dd>
|
|
||||||
<dd>
|
|
||||||
<a href="#mssecurityguide-turnonwindowsdefenderprotectionagainstpotentiallyunwantedapplications">MSSecurityGuide/TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications</a>
|
|
||||||
</dd>
|
|
||||||
<dd>
|
|
||||||
<a href="#mssecurityguide-wdigestauthentication">MSSecurityGuide/WDigestAuthentication</a>
|
|
||||||
</dd>
|
|
||||||
</dl>
|
|
||||||
|
|
||||||
> [!TIP]
|
> [!TIP]
|
||||||
> These are ADMX-backed policies and require a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](../understanding-admx-backed-policies.md).
|
> This CSP contains ADMX-backed policies which require a special SyncML format to enable or disable. You must specify the data type in the SyncML as <Format>chr</Format>. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
|
||||||
>
|
>
|
||||||
> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](../understanding-admx-backed-policies.md#enabling-a-policy).
|
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
|
||||||
>
|
|
||||||
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
|
<!-- MSSecurityGuide-Editable-Begin -->
|
||||||
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
||||||
|
<!-- MSSecurityGuide-Editable-End -->
|
||||||
|
|
||||||
|
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Begin -->
|
||||||
|
## ApplyUACRestrictionsToLocalAccountsOnNetworkLogon
|
||||||
|
|
||||||
|
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Applicability-Begin -->
|
||||||
|
| Scope | Editions | Applicable OS |
|
||||||
|
|:--|:--|:--|
|
||||||
|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
|
||||||
|
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Applicability-End -->
|
||||||
|
|
||||||
|
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-OmaUri-Begin -->
|
||||||
|
```Device
|
||||||
|
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/ApplyUACRestrictionsToLocalAccountsOnNetworkLogon
|
||||||
|
```
|
||||||
|
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-OmaUri-End -->
|
||||||
|
|
||||||
|
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Description-Begin -->
|
||||||
|
<!-- Description-Source-Not-Found -->
|
||||||
|
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Description-End -->
|
||||||
|
|
||||||
|
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Editable-Begin -->
|
||||||
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
||||||
|
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Editable-End -->
|
||||||
|
|
||||||
|
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-DFProperties-Begin -->
|
||||||
|
**Description framework properties**:
|
||||||
|
|
||||||
|
| Property name | Property value |
|
||||||
|
|:--|:--|
|
||||||
|
| Format | chr (string) |
|
||||||
|
| Access Type | Add, Delete, Get, Replace |
|
||||||
|
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-DFProperties-End -->
|
||||||
|
|
||||||
|
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-AdmxBacked-Begin -->
|
||||||
|
<!-- ADMX-Not-Found -->
|
||||||
|
> [!TIP]
|
||||||
|
> This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
||||||
|
|
||||||
|
**ADMX mapping**:
|
||||||
|
|
||||||
|
| Name | Value |
|
||||||
|
|:--|:--|
|
||||||
|
| Name | Pol_SecGuide_0201_LATFP |
|
||||||
|
| ADMX File Name | SecGuide.admx |
|
||||||
|
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-AdmxBacked-End -->
|
||||||
|
|
||||||
|
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Examples-Begin -->
|
||||||
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
||||||
|
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Examples-End -->
|
||||||
|
|
||||||
|
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-End -->
|
||||||
|
|
||||||
|
<!-- ConfigureSMBV1ClientDriver-Begin -->
|
||||||
|
## ConfigureSMBV1ClientDriver
|
||||||
|
|
||||||
|
<!-- ConfigureSMBV1ClientDriver-Applicability-Begin -->
|
||||||
|
| Scope | Editions | Applicable OS |
|
||||||
|
|:--|:--|:--|
|
||||||
|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
|
||||||
|
<!-- ConfigureSMBV1ClientDriver-Applicability-End -->
|
||||||
|
|
||||||
|
<!-- ConfigureSMBV1ClientDriver-OmaUri-Begin -->
|
||||||
|
```Device
|
||||||
|
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/ConfigureSMBV1ClientDriver
|
||||||
|
```
|
||||||
|
<!-- ConfigureSMBV1ClientDriver-OmaUri-End -->
|
||||||
|
|
||||||
|
<!-- ConfigureSMBV1ClientDriver-Description-Begin -->
|
||||||
|
<!-- Description-Source-Not-Found -->
|
||||||
|
<!-- ConfigureSMBV1ClientDriver-Description-End -->
|
||||||
|
|
||||||
|
<!-- ConfigureSMBV1ClientDriver-Editable-Begin -->
|
||||||
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
||||||
|
<!-- ConfigureSMBV1ClientDriver-Editable-End -->
|
||||||
|
|
||||||
|
<!-- ConfigureSMBV1ClientDriver-DFProperties-Begin -->
|
||||||
|
**Description framework properties**:
|
||||||
|
|
||||||
|
| Property name | Property value |
|
||||||
|
|:--|:--|
|
||||||
|
| Format | chr (string) |
|
||||||
|
| Access Type | Add, Delete, Get, Replace |
|
||||||
|
<!-- ConfigureSMBV1ClientDriver-DFProperties-End -->
|
||||||
|
|
||||||
|
<!-- ConfigureSMBV1ClientDriver-AdmxBacked-Begin -->
|
||||||
|
<!-- ADMX-Not-Found -->
|
||||||
|
> [!TIP]
|
||||||
|
> This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
||||||
|
|
||||||
|
**ADMX mapping**:
|
||||||
|
|
||||||
|
| Name | Value |
|
||||||
|
|:--|:--|
|
||||||
|
| Name | Pol_SecGuide_0002_SMBv1_ClientDriver |
|
||||||
|
| ADMX File Name | SecGuide.admx |
|
||||||
|
<!-- ConfigureSMBV1ClientDriver-AdmxBacked-End -->
|
||||||
|
|
||||||
|
<!-- ConfigureSMBV1ClientDriver-Examples-Begin -->
|
||||||
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
||||||
|
<!-- ConfigureSMBV1ClientDriver-Examples-End -->
|
||||||
|
|
||||||
|
<!-- ConfigureSMBV1ClientDriver-End -->
|
||||||
|
|
||||||
|
<!-- ConfigureSMBV1Server-Begin -->
|
||||||
|
## ConfigureSMBV1Server
|
||||||
|
|
||||||
|
<!-- ConfigureSMBV1Server-Applicability-Begin -->
|
||||||
|
| Scope | Editions | Applicable OS |
|
||||||
|
|:--|:--|:--|
|
||||||
|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
|
||||||
|
<!-- ConfigureSMBV1Server-Applicability-End -->
|
||||||
|
|
||||||
|
<!-- ConfigureSMBV1Server-OmaUri-Begin -->
|
||||||
|
```Device
|
||||||
|
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/ConfigureSMBV1Server
|
||||||
|
```
|
||||||
|
<!-- ConfigureSMBV1Server-OmaUri-End -->
|
||||||
|
|
||||||
|
<!-- ConfigureSMBV1Server-Description-Begin -->
|
||||||
|
<!-- Description-Source-Not-Found -->
|
||||||
|
<!-- ConfigureSMBV1Server-Description-End -->
|
||||||
|
|
||||||
|
<!-- ConfigureSMBV1Server-Editable-Begin -->
|
||||||
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
||||||
|
<!-- ConfigureSMBV1Server-Editable-End -->
|
||||||
|
|
||||||
|
<!-- ConfigureSMBV1Server-DFProperties-Begin -->
|
||||||
|
**Description framework properties**:
|
||||||
|
|
||||||
|
| Property name | Property value |
|
||||||
|
|:--|:--|
|
||||||
|
| Format | chr (string) |
|
||||||
|
| Access Type | Add, Delete, Get, Replace |
|
||||||
|
<!-- ConfigureSMBV1Server-DFProperties-End -->
|
||||||
|
|
||||||
|
<!-- ConfigureSMBV1Server-AdmxBacked-Begin -->
|
||||||
|
<!-- ADMX-Not-Found -->
|
||||||
|
> [!TIP]
|
||||||
|
> This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
||||||
|
|
||||||
|
**ADMX mapping**:
|
||||||
|
|
||||||
|
| Name | Value |
|
||||||
|
|:--|:--|
|
||||||
|
| Name | Pol_SecGuide_0001_SMBv1_Server |
|
||||||
|
| ADMX File Name | SecGuide.admx |
|
||||||
|
<!-- ConfigureSMBV1Server-AdmxBacked-End -->
|
||||||
|
|
||||||
|
<!-- ConfigureSMBV1Server-Examples-Begin -->
|
||||||
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
||||||
|
<!-- ConfigureSMBV1Server-Examples-End -->
|
||||||
|
|
||||||
|
<!-- ConfigureSMBV1Server-End -->
|
||||||
|
|
||||||
|
<!-- EnableStructuredExceptionHandlingOverwriteProtection-Begin -->
|
||||||
|
## EnableStructuredExceptionHandlingOverwriteProtection
|
||||||
|
|
||||||
|
<!-- EnableStructuredExceptionHandlingOverwriteProtection-Applicability-Begin -->
|
||||||
|
| Scope | Editions | Applicable OS |
|
||||||
|
|:--|:--|:--|
|
||||||
|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
|
||||||
|
<!-- EnableStructuredExceptionHandlingOverwriteProtection-Applicability-End -->
|
||||||
|
|
||||||
|
<!-- EnableStructuredExceptionHandlingOverwriteProtection-OmaUri-Begin -->
|
||||||
|
```Device
|
||||||
|
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/EnableStructuredExceptionHandlingOverwriteProtection
|
||||||
|
```
|
||||||
|
<!-- EnableStructuredExceptionHandlingOverwriteProtection-OmaUri-End -->
|
||||||
|
|
||||||
|
<!-- EnableStructuredExceptionHandlingOverwriteProtection-Description-Begin -->
|
||||||
|
<!-- Description-Source-Not-Found -->
|
||||||
|
<!-- EnableStructuredExceptionHandlingOverwriteProtection-Description-End -->
|
||||||
|
|
||||||
|
<!-- EnableStructuredExceptionHandlingOverwriteProtection-Editable-Begin -->
|
||||||
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
||||||
|
<!-- EnableStructuredExceptionHandlingOverwriteProtection-Editable-End -->
|
||||||
|
|
||||||
|
<!-- EnableStructuredExceptionHandlingOverwriteProtection-DFProperties-Begin -->
|
||||||
|
**Description framework properties**:
|
||||||
|
|
||||||
|
| Property name | Property value |
|
||||||
|
|:--|:--|
|
||||||
|
| Format | chr (string) |
|
||||||
|
| Access Type | Add, Delete, Get, Replace |
|
||||||
|
<!-- EnableStructuredExceptionHandlingOverwriteProtection-DFProperties-End -->
|
||||||
|
|
||||||
|
<!-- EnableStructuredExceptionHandlingOverwriteProtection-AdmxBacked-Begin -->
|
||||||
|
<!-- ADMX-Not-Found -->
|
||||||
|
> [!TIP]
|
||||||
|
> This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
||||||
|
|
||||||
|
**ADMX mapping**:
|
||||||
|
|
||||||
|
| Name | Value |
|
||||||
|
|:--|:--|
|
||||||
|
| Name | Pol_SecGuide_0102_SEHOP |
|
||||||
|
| ADMX File Name | SecGuide.admx |
|
||||||
|
<!-- EnableStructuredExceptionHandlingOverwriteProtection-AdmxBacked-End -->
|
||||||
|
|
||||||
|
<!-- EnableStructuredExceptionHandlingOverwriteProtection-Examples-Begin -->
|
||||||
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
||||||
|
<!-- EnableStructuredExceptionHandlingOverwriteProtection-Examples-End -->
|
||||||
|
|
||||||
|
<!-- EnableStructuredExceptionHandlingOverwriteProtection-End -->
|
||||||
|
|
||||||
|
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Begin -->
|
||||||
|
## TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications
|
||||||
|
|
||||||
|
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Applicability-Begin -->
|
||||||
|
| Scope | Editions | Applicable OS |
|
||||||
|
|:--|:--|:--|
|
||||||
|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
|
||||||
|
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Applicability-End -->
|
||||||
|
|
||||||
|
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-OmaUri-Begin -->
|
||||||
|
```Device
|
||||||
|
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications
|
||||||
|
```
|
||||||
|
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-OmaUri-End -->
|
||||||
|
|
||||||
|
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Description-Begin -->
|
||||||
|
<!-- Description-Source-Not-Found -->
|
||||||
|
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Description-End -->
|
||||||
|
|
||||||
|
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Editable-Begin -->
|
||||||
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
||||||
|
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Editable-End -->
|
||||||
|
|
||||||
|
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-DFProperties-Begin -->
|
||||||
|
**Description framework properties**:
|
||||||
|
|
||||||
|
| Property name | Property value |
|
||||||
|
|:--|:--|
|
||||||
|
| Format | chr (string) |
|
||||||
|
| Access Type | Add, Delete, Get, Replace |
|
||||||
|
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-DFProperties-End -->
|
||||||
|
|
||||||
|
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-AdmxBacked-Begin -->
|
||||||
|
<!-- ADMX-Not-Found -->
|
||||||
|
> [!TIP]
|
||||||
|
> This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
||||||
|
|
||||||
<hr/>
|
**ADMX mapping**:
|
||||||
|
|
||||||
|
| Name | Value |
|
||||||
|
|:--|:--|
|
||||||
|
| Name | Pol_SecGuide_0101_WDPUA |
|
||||||
|
| ADMX File Name | SecGuide.admx |
|
||||||
|
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-AdmxBacked-End -->
|
||||||
|
|
||||||
<!--Policy-->
|
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Examples-Begin -->
|
||||||
<a href="" id="mssecurityguide-applyuacrestrictionstolocalaccountsonnetworklogon"></a>**MSSecurityGuide/ApplyUACRestrictionsToLocalAccountsOnNetworkLogon**
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
||||||
|
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Examples-End -->
|
||||||
|
|
||||||
<!--SupportedSKUs-->
|
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-End -->
|
||||||
|
|
||||||
|
<!-- WDigestAuthentication-Begin -->
|
||||||
|
## WDigestAuthentication
|
||||||
|
|
||||||
|
<!-- WDigestAuthentication-Applicability-Begin -->
|
||||||
|
| Scope | Editions | Applicable OS |
|
||||||
|
|:--|:--|:--|
|
||||||
|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
|
||||||
|
<!-- WDigestAuthentication-Applicability-End -->
|
||||||
|
|
||||||
|
<!-- WDigestAuthentication-OmaUri-Begin -->
|
||||||
|
```Device
|
||||||
|
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/WDigestAuthentication
|
||||||
|
```
|
||||||
|
<!-- WDigestAuthentication-OmaUri-End -->
|
||||||
|
|
||||||
|Edition|Windows 10|Windows 11|
|
<!-- WDigestAuthentication-Description-Begin -->
|
||||||
|--- |--- |--- |
|
<!-- Description-Source-Not-Found -->
|
||||||
|Home|No|No|
|
<!-- WDigestAuthentication-Description-End -->
|
||||||
|Pro|Yes|Yes|
|
|
||||||
|Windows SE|No|Yes|
|
|
||||||
|Business|Yes|Yes|
|
|
||||||
|Enterprise|Yes|Yes|
|
|
||||||
|Education|Yes|Yes|
|
|
||||||
|
|
||||||
<!--/SupportedSKUs-->
|
<!-- WDigestAuthentication-Editable-Begin -->
|
||||||
<hr/>
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
||||||
|
<!-- WDigestAuthentication-Editable-End -->
|
||||||
|
|
||||||
<!--Scope-->
|
<!-- WDigestAuthentication-DFProperties-Begin -->
|
||||||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
**Description framework properties**:
|
||||||
|
|
||||||
> [!div class = "checklist"]
|
| Property name | Property value |
|
||||||
> * Device
|
|:--|:--|
|
||||||
|
| Format | chr (string) |
|
||||||
|
| Access Type | Add, Delete, Get, Replace |
|
||||||
|
<!-- WDigestAuthentication-DFProperties-End -->
|
||||||
|
|
||||||
<hr/>
|
<!-- WDigestAuthentication-AdmxBacked-Begin -->
|
||||||
|
<!-- ADMX-Not-Found -->
|
||||||
|
> [!TIP]
|
||||||
|
> This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
||||||
|
|
||||||
<!--/Scope-->
|
**ADMX mapping**:
|
||||||
<!--Description-->
|
|
||||||
|
|
||||||
<!--/Description-->
|
| Name | Value |
|
||||||
|
|:--|:--|
|
||||||
|
| Name | Pol_SecGuide_0202_WDigestAuthn |
|
||||||
|
| ADMX File Name | SecGuide.admx |
|
||||||
|
<!-- WDigestAuthentication-AdmxBacked-End -->
|
||||||
|
|
||||||
<!--ADMXBacked-->
|
<!-- WDigestAuthentication-Examples-Begin -->
|
||||||
ADMX Info:
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
||||||
- GP name: *Pol_SecGuide_0201_LATFP*
|
<!-- WDigestAuthentication-Examples-End -->
|
||||||
- GP ADMX file name: *SecGuide.admx*
|
|
||||||
|
|
||||||
<!--/ADMXBacked-->
|
<!-- WDigestAuthentication-End -->
|
||||||
<!--/Policy-->
|
|
||||||
|
|
||||||
<hr/>
|
<!-- MSSecurityGuide-CspMoreInfo-Begin -->
|
||||||
|
<!-- Add any additional information about this CSP here. Anything outside this section will get overwritten. -->
|
||||||
|
<!-- MSSecurityGuide-CspMoreInfo-End -->
|
||||||
|
|
||||||
<!--Policy-->
|
<!-- MSSecurityGuide-End -->
|
||||||
<a href="" id="mssecurityguide-configuresmbv1clientdriver"></a>**MSSecurityGuide/ConfigureSMBV1ClientDriver**
|
|
||||||
|
|
||||||
<!--SupportedSKUs-->
|
## Related articles
|
||||||
|
|
||||||
|Edition|Windows 10|Windows 11|
|
[Policy configuration service provider](policy-configuration-service-provider.md)
|
||||||
|--- |--- |--- |
|
|
||||||
|Home|No|No|
|
|
||||||
|Pro|Yes|Yes|
|
|
||||||
|Windows SE|No|Yes|
|
|
||||||
|Business|Yes|Yes|
|
|
||||||
|Enterprise|Yes|Yes|
|
|
||||||
|Education|Yes|Yes|
|
|
||||||
|
|
||||||
<!--/SupportedSKUs-->
|
|
||||||
<hr/>
|
|
||||||
|
|
||||||
<!--Scope-->
|
|
||||||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
|
||||||
|
|
||||||
> [!div class = "checklist"]
|
|
||||||
> * Device
|
|
||||||
|
|
||||||
<hr/>
|
|
||||||
|
|
||||||
<!--/Scope-->
|
|
||||||
<!--Description-->
|
|
||||||
|
|
||||||
<!--/Description-->
|
|
||||||
|
|
||||||
|
|
||||||
<!--ADMXBacked-->
|
|
||||||
ADMX Info:
|
|
||||||
- GP name: *Pol_SecGuide_0002_SMBv1_ClientDriver*
|
|
||||||
- GP ADMX file name: *SecGuide.admx*
|
|
||||||
|
|
||||||
<!--/ADMXBacked-->
|
|
||||||
<!--/Policy-->
|
|
||||||
|
|
||||||
<hr/>
|
|
||||||
|
|
||||||
<!--Policy-->
|
|
||||||
<a href="" id="mssecurityguide-configuresmbv1server"></a>**MSSecurityGuide/ConfigureSMBV1Server**
|
|
||||||
|
|
||||||
<!--SupportedSKUs-->
|
|
||||||
|
|
||||||
|Edition|Windows 10|Windows 11|
|
|
||||||
|--- |--- |--- |
|
|
||||||
|Home|No|No|
|
|
||||||
|Pro|Yes|Yes|
|
|
||||||
|Windows SE|No|Yes|
|
|
||||||
|Business|Yes|Yes|
|
|
||||||
|Enterprise|Yes|Yes|
|
|
||||||
|Education|Yes|Yes|
|
|
||||||
|
|
||||||
<!--/SupportedSKUs-->
|
|
||||||
<hr/>
|
|
||||||
|
|
||||||
<!--Scope-->
|
|
||||||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
|
||||||
|
|
||||||
> [!div class = "checklist"]
|
|
||||||
> * Device
|
|
||||||
|
|
||||||
<hr/>
|
|
||||||
|
|
||||||
<!--/Scope-->
|
|
||||||
<!--Description-->
|
|
||||||
|
|
||||||
<!--/Description-->
|
|
||||||
|
|
||||||
|
|
||||||
<!--ADMXBacked-->
|
|
||||||
ADMX Info:
|
|
||||||
- GP name: *Pol_SecGuide_0001_SMBv1_Server*
|
|
||||||
- GP ADMX file name: *SecGuide.admx*
|
|
||||||
|
|
||||||
<!--/ADMXBacked-->
|
|
||||||
<!--/Policy-->
|
|
||||||
|
|
||||||
<hr/>
|
|
||||||
|
|
||||||
<!--Policy-->
|
|
||||||
<a href="" id="mssecurityguide-enablestructuredexceptionhandlingoverwriteprotection"></a>**MSSecurityGuide/EnableStructuredExceptionHandlingOverwriteProtection**
|
|
||||||
|
|
||||||
<!--SupportedSKUs-->
|
|
||||||
|
|
||||||
|Edition|Windows 10|Windows 11|
|
|
||||||
|--- |--- |--- |
|
|
||||||
|Home|No|No|
|
|
||||||
|Pro|Yes|Yes|
|
|
||||||
|Windows SE|No|Yes|
|
|
||||||
|Business|Yes|Yes|
|
|
||||||
|Enterprise|Yes|Yes|
|
|
||||||
|Education|Yes|Yes|
|
|
||||||
|
|
||||||
<!--/SupportedSKUs-->
|
|
||||||
<hr/>
|
|
||||||
|
|
||||||
<!--Scope-->
|
|
||||||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
|
||||||
|
|
||||||
> [!div class = "checklist"]
|
|
||||||
> * Device
|
|
||||||
|
|
||||||
<hr/>
|
|
||||||
|
|
||||||
<!--/Scope-->
|
|
||||||
<!--Description-->
|
|
||||||
|
|
||||||
<!--/Description-->
|
|
||||||
|
|
||||||
|
|
||||||
<!--ADMXBacked-->
|
|
||||||
ADMX Info:
|
|
||||||
- GP name: *Pol_SecGuide_0102_SEHOP*
|
|
||||||
- GP ADMX file name: *SecGuide.admx*
|
|
||||||
|
|
||||||
<!--/ADMXBacked-->
|
|
||||||
<!--/Policy-->
|
|
||||||
|
|
||||||
<hr/>
|
|
||||||
|
|
||||||
<!--Policy-->
|
|
||||||
<a href="" id="mssecurityguide-turnonwindowsdefenderprotectionagainstpotentiallyunwantedapplications"></a>**MSSecurityGuide/TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications**
|
|
||||||
|
|
||||||
<!--SupportedSKUs-->
|
|
||||||
|
|
||||||
|Edition|Windows 10|Windows 11|
|
|
||||||
|--- |--- |--- |
|
|
||||||
|Home|No|No|
|
|
||||||
|Pro|Yes|Yes|
|
|
||||||
|Windows SE|No|Yes|
|
|
||||||
|Business|Yes|Yes|
|
|
||||||
|Enterprise|Yes|Yes|
|
|
||||||
|Education|Yes|Yes|
|
|
||||||
|
|
||||||
<!--/SupportedSKUs-->
|
|
||||||
<hr/>
|
|
||||||
|
|
||||||
<!--Scope-->
|
|
||||||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
|
||||||
|
|
||||||
> [!div class = "checklist"]
|
|
||||||
> * Device
|
|
||||||
|
|
||||||
<hr/>
|
|
||||||
|
|
||||||
<!--/Scope-->
|
|
||||||
<!--Description-->
|
|
||||||
|
|
||||||
<!--/Description-->
|
|
||||||
|
|
||||||
<!--ADMXBacked-->
|
|
||||||
ADMX Info:
|
|
||||||
- GP name: *Pol_SecGuide_0101_WDPUA*
|
|
||||||
- GP ADMX file name: *SecGuide.admx*
|
|
||||||
|
|
||||||
<!--/ADMXBacked-->
|
|
||||||
<!--/Policy-->
|
|
||||||
|
|
||||||
<hr/>
|
|
||||||
|
|
||||||
<!--Policy-->
|
|
||||||
<a href="" id="mssecurityguide-wdigestauthentication"></a>**MSSecurityGuide/WDigestAuthentication**
|
|
||||||
|
|
||||||
<!--SupportedSKUs-->
|
|
||||||
|
|
||||||
|Edition|Windows 10|Windows 11|
|
|
||||||
|--- |--- |--- |
|
|
||||||
|Home|No|No|
|
|
||||||
|Pro|Yes|Yes|
|
|
||||||
|Windows SE|No|Yes|
|
|
||||||
|Business|Yes|Yes|
|
|
||||||
|Enterprise|Yes|Yes|
|
|
||||||
|Education|Yes|Yes|
|
|
||||||
|
|
||||||
<!--/SupportedSKUs-->
|
|
||||||
<hr/>
|
|
||||||
|
|
||||||
<!--Scope-->
|
|
||||||
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
|
||||||
|
|
||||||
> [!div class = "checklist"]
|
|
||||||
> * Device
|
|
||||||
|
|
||||||
<hr/>
|
|
||||||
|
|
||||||
<!--/Scope-->
|
|
||||||
<!--Description-->
|
|
||||||
|
|
||||||
<!--/Description-->
|
|
||||||
|
|
||||||
<!--ADMXBacked-->
|
|
||||||
ADMX Info:
|
|
||||||
- GP name: *Pol_SecGuide_0202_WDigestAuthn*
|
|
||||||
- GP ADMX file name: *SecGuide.admx*
|
|
||||||
|
|
||||||
<!--/ADMXBacked-->
|
|
||||||
<!--/Policy-->
|
|
||||||
<hr/>
|
|
||||||
|
|
||||||
<!--/Policies-->
|
|
||||||
|
|
||||||
## Related topics
|
|
||||||
|
|
||||||
[Policy configuration service provider](policy-configuration-service-provider.md)
|
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user