deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 13:27:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

updates

Browse Source
This commit is contained in:
Paolo Matarazzo 2023-08-11 16:19:50 -04:00
parent b513c30ecf
commit 5b17368bf4
2 changed files with 3 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
windows/security/operating-system-security/data-protection/personal-data-encryption/configure.md
View File

@ -14,7 +14,7 @@ This article describes the Personal Data Encryption (PDE) settings and how to co
> >
> The PDE APIs can be used to create custom applications and scripts to specify which content to protect and at what level to protect the content. Additionally, the PDE APIs can't be used to protect content until the PDE policy has been enabled. > The PDE APIs can be used to create custom applications and scripts to specify which content to protect and at what level to protect the content. Additionally, the PDE APIs can't be used to protect content until the PDE policy has been enabled.
## PDE settings list ## PDE settings
The following table lists the required settings to enable PDE. The following table lists the required settings to enable PDE.
@ -23,9 +23,6 @@ The following table lists the required settings to enable PDE.
|Enable Personal Data Encryption|PDE isn't enabled by default. Before PDE can be used, you must enable it.| |Enable Personal Data Encryption|PDE isn't enabled by default. Before PDE can be used, you must enable it.|
|Sign-in and lock last interactive user automatically after a restart| Winlogon automatic restart sign-on (ARSO) isn't supported for use with PDE. To use PDE, ARSO must be disabled.| |Sign-in and lock last interactive user automatically after a restart| Winlogon automatic restart sign-on (ARSO) isn't supported for use with PDE. To use PDE, ARSO must be disabled.|
> [!NOTE]
> Enabling the PDE policy on devices only enables the PDE feature. It does not protect any content. To protect content via PDE, use the [PDE APIs](/uwp/api/windows.security.dataprotection.userdataprotectionmanager). The PDE APIs can be used to create custom applications and scripts to specify which content to protect and at what level to protect the content. Additionally, the PDE APIs can't be used to protect content until the PDE policy has been enabled.
## PDE hardening recommendations ## PDE hardening recommendations
The following table lists the recommended settings to improve PDE's security. The following table lists the recommended settings to improve PDE's security.

4
windows/security/operating-system-security/data-protection/personal-data-encryption/faq.yml
View File

@ -4,7 +4,7 @@ metadata:
title: Frequently asked questions for Personal Data Encryption (PDE) title: Frequently asked questions for Personal Data Encryption (PDE)
description: Answers to common questions regarding Personal Data Encryption (PDE). description: Answers to common questions regarding Personal Data Encryption (PDE).
ms.topic: faq ms.topic: faq
ms.date: 03/13/2023 ms.date: 08/11/2023
title: Frequently asked questions for Personal Data Encryption (PDE) title: Frequently asked questions for Personal Data Encryption (PDE)
summary: | summary: |
@ -47,7 +47,7 @@ sections:
- question: Can users manually encrypt and decrypt files with PDE? - question: Can users manually encrypt and decrypt files with PDE?
answer: | answer: |
Currently users can decrypt files manually but they can't encrypt files manually. For information on how a user can manually decrypt a file, see the section **Disable PDE and decrypt files** in [Personal Data Encryption (PDE)](index.md). Currently users can decrypt files manually but they can't encrypt files manually. For information on how a user can manually decrypt a file, see the section [Decrypt PDE-encrypted content](configure.md#decrypt-pde-encrypted-content).
- question: If a user signs into Windows with a password instead of Windows Hello for Business, will they be able to access their PDE protected content? - question: If a user signs into Windows with a password instead of Windows Hello for Business, will they be able to access their PDE protected content?
answer: | answer: |