deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-14 22:37:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

updates

Browse Source
This commit is contained in:
Paolo Matarazzo 2023-08-18 15:41:33 -04:00
parent 82fb700817
commit 40488b2379
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
windows/security/identity-protection/remote-credential-guard.md
View File

@ -118,7 +118,7 @@ To configure devices using the registry, use the following settings:
| Setting |
|-|
| Key path: `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa` <ul><li>Key name: `DisableRestrictedAdmin`</li><li>Type: `REG_DWORD`</li><li>Value: `0`</li></ul>|
| **- Key path:** `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa` <br>**- Key name:** `DisableRestrictedAdmin`<br>**- Type:** `REG_DWORD`<br>**- Value:** `0`|
You can add this by running the following command from an elevated command prompt:
@ -163,6 +163,10 @@ To configure your clients, you can use:
|--|--|--|
| **Administrative Templates > System > Credentials Delegation** | Restrict delegation of credentials to remote servers | Select **Enabled** and in the dropdown, select one of the options:<ul><li>**Restrict Credential Delegation**</li><li>**Require Remote Credential Guard**</li></ul> |
| Setting |
|--|
| **- Category:** Administrative Templates > System > Credentials Delegation<br>**- Setting name:** Restrict delegation of credentials to remote servers<br>**- Value:** Select **Enabled** and in the dropdown, select one of the options:<br>**Restrict Credential Delegation**<br>**Require Remote Credential Guard**|
[!INCLUDE [intune-settings-catalog-2](../../../includes/configure/intune-settings-catalog-2.md)]
Alternatively, you can configure devices using a [custom policy][INT-3] with the [Policy CSP][CSP-2].
@ -190,6 +194,8 @@ Possible values for `RestrictedRemoteAdministrationDrop` are:
#### [:::image type="icon" source="../images/icons/windows-os.svg" border="false"::: **Registry**](#tab/reg)
Not documented.
---
## Use Remote Credential Guard