deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 13:27:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

updated page to fix broken link and missing info

Browse Source 
updated page to fix broken link and missing info
This commit is contained in:
Gitprakhar13 2022-10-25 14:07:09 -07:00 committed by GitHub
parent 9d1ac6a3d9
commit 3eaad00774
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
windows/client-management/mdm/healthattestation-csp.md
View File

@ -265,7 +265,7 @@ calls between client and MAA and for each call the GUID is separated by semicolo
### MAA CSP Integration Steps
1. Set up a MAA provider instance: MAA instance can be created following the steps at [Quickstart: Set up Azure Attestation by using the Azure portal](/azure/attestation/quickstart-portal].
1. Set up a MAA provider instance: MAA instance can be created following the steps at [Quickstart: Set up Azure Attestation by using the Azure portal](/azure/attestation/quickstart-portal).
2. Update the provider with an appropriate policy: The MAA instance should be updated with an appropriate policy. For more information, see [How to author an Azure Attestation policy](/azure/attestation/claim-rule-grammar).
@ -933,6 +933,16 @@ If DEPPolicy = 0 (Off), then take one of the following actions that align with y
- Allow conditional access based on other data points that are present at evaluation time. For example, other attributes on the health certificate, or a device's past activities and trust history.
- Take one of the previous actions and additionally place the device in a watch list to monitor the device more closely for potential risks.
DEP policy evaluation is a non binary status when queried. It is then mapped to an On/Off state.
|DEP Policy level |Description | Attestation Reported Level | Property Value |
|--------------|-----------|------------|-------------|
|OptIn(Default Configuration) |Only Windows system components and services have DEP applied | 0 | 2 |
|OptOut |DEP is enabled for all processes.Administrators can manually create a list of specific applications that do not have DEP applied. | 1 | 3 |
|AlwaysOn |DEP is enabled for all processess. | 3 | 1 |
|AlwaysOff |DEP is not enabled for any process. | 2 | 0 |
<a href="" id="bitlockerstatus"></a>**BitLockerStatus** (at boot time)
When BitLocker is reported "on" at boot time, the device is able to protect data that is stored on the drive from unauthorized access, when the system is turned off or goes to hibernation.