This commit is contained in:
Paolo Matarazzo
2023-08-11 16:19:50 -04:00
parent b513c30ecf
commit 5b17368bf4
2 changed files with 3 additions and 6 deletions

View File

@ -14,7 +14,7 @@ This article describes the Personal Data Encryption (PDE) settings and how to co
>
> The PDE APIs can be used to create custom applications and scripts to specify which content to protect and at what level to protect the content. Additionally, the PDE APIs can't be used to protect content until the PDE policy has been enabled.
## PDE settings list
## PDE settings
The following table lists the required settings to enable PDE.
@ -23,9 +23,6 @@ The following table lists the required settings to enable PDE.
|Enable Personal Data Encryption|PDE isn't enabled by default. Before PDE can be used, you must enable it.|
|Sign-in and lock last interactive user automatically after a restart| Winlogon automatic restart sign-on (ARSO) isn't supported for use with PDE. To use PDE, ARSO must be disabled.|
> [!NOTE]
> Enabling the PDE policy on devices only enables the PDE feature. It does not protect any content. To protect content via PDE, use the [PDE APIs](/uwp/api/windows.security.dataprotection.userdataprotectionmanager). The PDE APIs can be used to create custom applications and scripts to specify which content to protect and at what level to protect the content. Additionally, the PDE APIs can't be used to protect content until the PDE policy has been enabled.
## PDE hardening recommendations
The following table lists the recommended settings to improve PDE's security.