deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-20 04:43:37 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Update block-untrusted-fonts-in-enterprise.md

Browse Source 
As reported in issue ticket #8687 (Dead link to Dropping the “Untrusted Font Blocking” setting), the outdated link to blogs.technet.microsoft.com just leads to a 404 error and no proper redirect to the existing article.

Thanks to KalleOlaviNiemitalo for noticing, reporting the issue and suggesting the link to the correct page.

Proposed change:
- replace the blogs.technet.microsoft.com URL with a working techcommunity.microsoft.com URL

Whitespace changes:
- add missing MarkDown indent marker compatibility spacing
- normalize bullet point list spacing (from 3 down to 1)
- remove any end-of-line blank space

Closes #8687
This commit is contained in:
Trond B. Krokli
2020-11-23 01:25:45 +01:00
committed by GitHub
parent 266faed939
commit 41951448fa
1 changed files with 30 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
windows/security/threat-protection/block-untrusted-fonts-in-enterprise.md
View File

@ -21,7 +21,7 @@ ms.localizationpriority: medium
- Windows 10
>Learn more about what features and functionality are supported in each Windows edition at [Compare Windows 10 Editions](https://www.microsoft.com/WindowsForBusiness/Compare).
> Learn more about what features and functionality are supported in each Windows edition at [Compare Windows 10 Editions](https://www.microsoft.com/WindowsForBusiness/Compare).
To help protect your company from attacks which may originate from untrusted or attacker controlled font files, we’ve created the Blocking Untrusted Fonts feature. Using this feature, you can turn on a global setting that stops your employees from loading untrusted fonts processed using the Graphics Device Interface (GDI) onto your network. Untrusted fonts are any font installed outside of the `%windir%/Fonts` directory. Blocking untrusted fonts helps prevent both remote (web-based or email-based) and local EOP attacks that can happen during the font file-parsing process.
@ -85,8 +85,8 @@ To turn this feature on, off, or to use audit mode:
- **To audit with this feature.** Type **3000000000000**.
>[!Important]
>Your existing **MitigationOptions** values should be saved during your update. For example, if the current value is *1000*, your updated value should be *1000000001000*.
> [!Important]
> Your existing **MitigationOptions** values should be saved during your update. For example, if the current value is *1000*, your updated value should be *1000000001000*.
5. Restart your computer.
@ -105,8 +105,8 @@ After you turn this feature on, or start using Audit mode, you can look at your
FontPath:<br>
Blocked: true
>[!NOTE]
>Because the **FontType** is *Memory*, there’s no associated **FontPath**.
> [!NOTE]
> Because the **FontType** is *Memory*, there’s no associated **FontPath**.
**Event Example 2 - Winlogon**<br>
Winlogon.exe attempted loading a font that is restricted by font-loading policy.<br>
@ -114,8 +114,8 @@ After you turn this feature on, or start using Audit mode, you can look at your
FontPath: `\??\C:\PROGRAM FILES (X86)\COMMON FILES\MICROSOFT SHARED\EQUATION\MTEXTRA.TTF`<br>
Blocked: true
>[!NOTE]
>Because the **FontType** is *File*, there’s also an associated **FontPath**.
> [!NOTE]
> Because the **FontType** is *File*, there’s also an associated **FontPath**.
**Event Example 3 - Internet Explorer running in Audit mode**<br>
Iexplore.exe attempted loading a font that is restricted by font-loading policy.<br>
@ -123,8 +123,8 @@ After you turn this feature on, or start using Audit mode, you can look at your
FontPath:<br>
Blocked: false
>[!NOTE]
>In Audit mode, the problem is recorded, but the font isn’t blocked.
> [!NOTE]
> In Audit mode, the problem is recorded, but the font isn’t blocked.
## Fix apps having problems because of blocked fonts
Your company may still need apps that are having problems because of blocked fonts, so we suggest that you first run this feature in Audit mode to determine which fonts are causing the problems.
@ -144,10 +144,4 @@ After you figure out the problematic fonts, you can try to fix your apps in 2 wa
## Related content
- [Dropping the “Untrusted Font Blocking” setting](https://blogs.technet.microsoft.com/secguide/2017/06/15/dropping-the-untrusted-font-blocking-setting/)
- [Dropping the “Untrusted Font Blocking” setting](https://techcommunity.microsoft.com/t5/microsoft-security-baselines/dropping-the-quot-untrusted-font-blocking-quot-setting/ba-p/701068/)