deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 21:37:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

PDE Intune Config Updates 7

Browse Source
This commit is contained in:
Frank Rojas 2023-03-13 15:37:43 -04:00
parent fcb9f92b78
commit 50167e6013
8 changed files with 21 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
windows/security/TOC.yml
View File

@ -163,7 +163,7 @@
href: information-protection/personal-data-encryption/faq-pde.yml href: information-protection/personal-data-encryption/faq-pde.yml
- name: Configure Personal Data Encryption (PDE) in Intune - name: Configure Personal Data Encryption (PDE) in Intune
items: items:
- name: Configure Personal Data Encryption (PDE) using Intune - name: Configure Personal Data Encryption (PDE) in Intune
href: information-protection/personal-data-encryption/configure-pde-in-intune.md href: information-protection/personal-data-encryption/configure-pde-in-intune.md
- name: Enable Personal Data Encryption (PDE) - name: Enable Personal Data Encryption (PDE)
href: information-protection/personal-data-encryption/pde-in-intune/intune-enable-pde.md href: information-protection/personal-data-encryption/pde-in-intune/intune-enable-pde.md

4
windows/security/information-protection/personal-data-encryption/configure-pde-in-intune.md
View File

@ -1,5 +1,5 @@
--- ---
title: Configure Personal Data Encryption (PDE) using Intune title: Configure Personal Data Encryption (PDE) in Intune
description: Configuring and enabling Personal Data Encryption (PDE) required and recommended policies in Intune description: Configuring and enabling Personal Data Encryption (PDE) required and recommended policies in Intune
author: frankroj author: frankroj
ms.author: frankroj ms.author: frankroj
@ -15,7 +15,7 @@ ms.date: 03/13/2023
<!-- Max 5963468 OS 32516487 --> <!-- Max 5963468 OS 32516487 -->
<!-- Max 6946251 --> <!-- Max 6946251 -->
# Configure Personal Data Encryption (PDE) policies using Intune # Configure Personal Data Encryption (PDE) policies in Intune
The various required and recommended policies needed for Personal Data Encryption (PDE) can be configured in Intune. The following links for both required and recommended policies contain step by step instructions on how to configure these policies in Intune. The various required and recommended policies needed for Personal Data Encryption (PDE) can be configured in Intune. The following links for both required and recommended policies contain step by step instructions on how to configure these policies in Intune.

6
windows/security/information-protection/personal-data-encryption/pde-in-intune/intune-disable-arso.md
View File

@ -1,6 +1,6 @@
--- ---
title: Disable Winlogon automatic restart sign-on (ARSO) for PDE using Intune title: Disable Winlogon automatic restart sign-on (ARSO) for PDE in Intune
description: Disable Winlogon automatic restart sign-on (ARSO) for PDE using Intune description: Disable Winlogon automatic restart sign-on (ARSO) for PDE in Intune
author: frankroj author: frankroj
ms.author: frankroj ms.author: frankroj
ms.reviewer: rhonnegowda ms.reviewer: rhonnegowda
@ -16,7 +16,7 @@ ms.date: 03/13/2023
Winlogon automatic restart sign-on (ARSO) isn't supported for use with Personal Data Encryption (PDE). For this reason, in order to use PDE, ARSO needs to be disabled. Winlogon automatic restart sign-on (ARSO) isn't supported for use with Personal Data Encryption (PDE). For this reason, in order to use PDE, ARSO needs to be disabled.
## Disable Winlogon automatic restart sign-on (ARSO) using Intune ## Disable Winlogon automatic restart sign-on (ARSO) in Intune
To disable ARSO using Intune, follow the below steps: To disable ARSO using Intune, follow the below steps:

6
windows/security/information-protection/personal-data-encryption/pde-in-intune/intune-disable-hibernation.md
View File

@ -1,6 +1,6 @@
--- ---
title: Disable hibernation for PDE using Intune title: Disable hibernation for PDE in Intune
description: Disable hibernation for PDE using Intune description: Disable hibernation for PDE in Intune
author: frankroj author: frankroj
ms.author: frankroj ms.author: frankroj
ms.reviewer: rhonnegowda ms.reviewer: rhonnegowda
@ -16,7 +16,7 @@ ms.date: 03/13/2023
Hibernation files can potentially cause the keys used by Personal Data Encryption (PDE) to protect content to be exposed. For greatest security, disable hibernation. Hibernation files can potentially cause the keys used by Personal Data Encryption (PDE) to protect content to be exposed. For greatest security, disable hibernation.
## Disable hibernation using Intune ## Disable hibernation in Intune
To disable hibernation using Intune, follow the below steps: To disable hibernation using Intune, follow the below steps:

6
windows/security/information-protection/personal-data-encryption/pde-in-intune/intune-disable-memory-dumps.md
View File

@ -1,6 +1,6 @@
--- ---
title: Disable kernel-mode crash dumps and live dumps for PDE using Intune title: Disable kernel-mode crash dumps and live dumps for PDE in Intune
description: Disable kernel-mode crash dumps and live dumps for PDE using Intune description: Disable kernel-mode crash dumps and live dumps for PDE in Intune
author: frankroj author: frankroj
ms.author: frankroj ms.author: frankroj
ms.reviewer: rhonnegowda ms.reviewer: rhonnegowda
@ -16,7 +16,7 @@ ms.date: 03/13/2023
Kernel-mode crash dumps and live dumps can potentially cause the keys used by Personal Data Encryption (PDE) to protect content to be exposed. For greatest security, disable kernel-mode crash dumps and live dumps. Kernel-mode crash dumps and live dumps can potentially cause the keys used by Personal Data Encryption (PDE) to protect content to be exposed. For greatest security, disable kernel-mode crash dumps and live dumps.
## Disable kernel-mode crash dumps and live dumps using Intune ## Disable kernel-mode crash dumps and live dumps in Intune
To disable kernel-mode crash dumps and live dumps using Intune, follow the below steps: To disable kernel-mode crash dumps and live dumps using Intune, follow the below steps:

6
windows/security/information-protection/personal-data-encryption/pde-in-intune/intune-disable-password-connected-standby.md
View File

@ -1,6 +1,6 @@
--- ---
title: Disable allowing users to select when a password is required when resuming from connected standby for PDE using Intune title: Disable allowing users to select when a password is required when resuming from connected standby for PDE in Intune
description: Disable allowing users to select when a password is required when resuming from connected standby for PDE using Intune description: Disable allowing users to select when a password is required when resuming from connected standby for PDE in Intune
author: frankroj author: frankroj
ms.author: frankroj ms.author: frankroj
ms.reviewer: rhonnegowda ms.reviewer: rhonnegowda
@ -32,7 +32,7 @@ When the **Disable allowing users to select when a password is required when res
Because of this undesired outcome, it's recommended to explicitly disable this policy on Azure AD joined devices instead of leaving it at the default of **Not configured**. Because of this undesired outcome, it's recommended to explicitly disable this policy on Azure AD joined devices instead of leaving it at the default of **Not configured**.
## Disable allowing users to select when a password is required when resuming from connected standby using Intune ## Disable allowing users to select when a password is required when resuming from connected standby in Intune
To disable the policy **Disable allowing users to select when a password is required when resuming from connected standby** using Intune, follow the below steps: To disable the policy **Disable allowing users to select when a password is required when resuming from connected standby** using Intune, follow the below steps:

6
windows/security/information-protection/personal-data-encryption/pde-in-intune/intune-disable-wer.md
View File

@ -1,6 +1,6 @@
--- ---
title: Disable Windows Error Reporting (WER)/user-mode crash dumps for PDE using Intune title: Disable Windows Error Reporting (WER)/user-mode crash dumps for PDE in Intune
description: Disable Windows Error Reporting (WER)/user-mode crash dumps for PDE using Intune description: Disable Windows Error Reporting (WER)/user-mode crash dumps for PDE in Intune
author: frankroj author: frankroj
ms.author: frankroj ms.author: frankroj
ms.reviewer: rhonnegowda ms.reviewer: rhonnegowda
@ -16,7 +16,7 @@ ms.date: 03/13/2023
Disabling Windows Error Reporting prevents user-mode crash dumps. User-mode crash dumps can potentially cause the keys used by PDE to protect content to be exposed. For greatest security, disable user-mode crash dumps. Disabling Windows Error Reporting prevents user-mode crash dumps. User-mode crash dumps can potentially cause the keys used by PDE to protect content to be exposed. For greatest security, disable user-mode crash dumps.
## Disable Windows Error Reporting (WER)/user-mode crash dumps using Intune ## Disable Windows Error Reporting (WER)/user-mode crash dumps in Intune
To disable Windows Error Reporting (WER) and user-mode crash dumps using Intune, follow the below steps: To disable Windows Error Reporting (WER) and user-mode crash dumps using Intune, follow the below steps:

6
windows/security/information-protection/personal-data-encryption/pde-in-intune/intune-enable-pde.md
View File

@ -1,6 +1,6 @@
--- ---
title: Enable Personal Data Encryption (PDE) using Intune title: Enable Personal Data Encryption (PDE) in Intune
description: Enable Personal Data Encryption (PDE) using Intune description: Enable Personal Data Encryption (PDE) in Intune
author: frankroj author: frankroj
ms.author: frankroj ms.author: frankroj
ms.reviewer: rhonnegowda ms.reviewer: rhonnegowda
@ -19,7 +19,7 @@ By default, Personal Data Encryption (PDE) is not enabled on devices. Before PDE
> [!NOTE] > [!NOTE]
> Enabling the PDE policy on devices only enables the PDE feature. It does not protect any content. To protect content via PDE, use the [PDE APIs](/uwp/api/windows.security.dataprotection.userdataprotectionmanager). The PDE APIs can be used to create custom applications and scripts to specify which content to protect and at what level to protect the content. Additionally, the PDE APIs can't be used to protect content until the PDE policy has been enabled. > Enabling the PDE policy on devices only enables the PDE feature. It does not protect any content. To protect content via PDE, use the [PDE APIs](/uwp/api/windows.security.dataprotection.userdataprotectionmanager). The PDE APIs can be used to create custom applications and scripts to specify which content to protect and at what level to protect the content. Additionally, the PDE APIs can't be used to protect content until the PDE policy has been enabled.
## Enable Personal Data Encryption (PDE) using Intune ## Enable Personal Data Encryption (PDE) in Intune
To enable Personal Data Encryption (PDE) using Intune, follow the below steps: To enable Personal Data Encryption (PDE) using Intune, follow the below steps: