deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-20 21:03:42 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Indented content in lists, added white space

Browse Source
This commit is contained in:
Gary Moore
2020-03-04 14:08:26 -08:00
committed by GitHub
parent ffb182a4a2
commit 51b801b921
1 changed files with 11 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md
View File

@ -34,25 +34,31 @@ System Guard Secure Launch can be configured for Mobile Device Management (MDM)
### Group Policy ### Group Policy
1. Click **Start** > type and then click **Edit group policy**. 1. Click **Start** > type and then click **Edit group policy**.
2. Click **Computer Configuration** > **Administrative Templates** > **System** > **Device Guard** > **Turn On Virtualization Based Security** > **Secure Launch Configuration**. 2. Click **Computer Configuration** > **Administrative Templates** > **System** > **Device Guard** > **Turn On Virtualization Based Security** > **Secure Launch Configuration**.
![Secure Launch Group Policy](images/secure-launch-group-policy.png) ![Secure Launch Group Policy](images/secure-launch-group-policy.png)
### Windows Security Center ### Windows Security Center
Click **Start** > **Settings** > **Update & Security** > **Windows Security** > **Open Windows Security** > **Device security** > **Core isolation** > **Firmware protection**. Click **Start** > **Settings** > **Update & Security** > **Windows Security** > **Open Windows Security** > **Device security**
> **Core isolation** > **Firmware protection**.
![Windows Security Center](images/secure-launch-security-app.png)
![Windows Security Center](images/secure-launch-security-app.png)
### Registry ### Registry
1. Open Registry editor. 1. Open Registry editor.
2. Click **HKEY_LOCAL_MACHINE** > **SYSTEM** > **CurrentControlSet** > **Control** > **DeviceGuard** > **Scenarios**. 2. Click **HKEY_LOCAL_MACHINE** > **SYSTEM** > **CurrentControlSet** > **Control** > **DeviceGuard** > **Scenarios**.
3. Right-click **Scenarios** > **New** > **Key** and name the new key **SystemGuard**. 3. Right-click **Scenarios** > **New** > **Key** and name the new key **SystemGuard**.
4. Right-click **SystemGuard** > **New** > **DWORD (32-bit) Value** and name the new DWORD **Enabled**. 4. Right-click **SystemGuard** > **New** > **DWORD (32-bit) Value** and name the new DWORD **Enabled**.
5. Double-click **Enabled**, change the value to **1**, and click **OK**. 5. Double-click **Enabled**, change the value to **1**, and click **OK**.
![Secure Launch Registry](images/secure-launch-registry.png) ![Secure Launch Registry](images/secure-launch-registry.png)
> [!IMPORTANT] > [!IMPORTANT]
> If System Guard is enabled with a registry key, standard hardware security is not available for the Intel i5 7200U processor. > If System Guard is enabled with a registry key, standard hardware security is not available for the Intel i5 7200U processor.