deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-16 02:43:43 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

test

Browse Source
This commit is contained in:
Paolo Matarazzo
2023-09-23 10:08:49 -04:00
parent 7f0de8cec0
commit 60bd854d51
1 changed files with 21 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
windows/security/operating-system-security/data-protection/bitlocker/configure.md
View File

@ -31,12 +31,28 @@ The following table lists the BitLocker policies applicable to all drive types,
|Policy name| CSP | GPO |
|-|-|-|
|[Choose default folder for recovery password](#choose-default-folder-for-recovery-password)|✅|✅|
|[[Allow Standard User Encryption](#allow-standard-user-encryption)]|✅|❌|
|[[Allow Suspension Of BitLocker Protection](#allow-suspension-of-bitlocker-protection)]|✅|❌|
|[Choose default folder for recovery password](#choose-default-folder-for-recovery-password)|❌|✅|
|[Choose drive encryption method and cipher strength](#choose-drive-encryption-method-and-cipher-strength)|✅|✅|
|[Disable new DMA devices when this computer is locked](#disable-new-dma-devices-when-this-computer-is-locked)|✅|✅|
|[Prevent memory overwrite on restart](#prevent-memory-overwrite-on-restart)|✅|✅|
|[Provide the unique identifiers for your organization](#provide-the-unique-identifiers-for-your-organization)|❌|✅|
|[Validate smart card certificate usage rule compliance](#validate-smart-card-certificate-usage-rule-compliance)|✅|❌|
|[Disable new DMA devices when this computer is locked](#disable-new-dma-devices-when-this-computer-is-locked)|❌|✅|
|[Prevent memory overwrite on restart](#prevent-memory-overwrite-on-restart)|❌|✅|
|[Provide the unique identifiers for your organization](#provide-the-unique-identifiers-for-your-organization)|✅|✅|
|[Validate smart card certificate usage rule compliance](#validate-smart-card-certificate-usage-rule-compliance)|❌|✅|
### Allow Standard User Encryption
| Configuration tool | Path |
|--|--|
| CSP | ./Device/Vendor/MSFT/BitLocker/[AllowStandardUserEncryption](/windows/client-management/mdm/bitlocker-csp#allowstandarduserencryption)|
| Group policy | Not available |
### Allow Suspension Of BitLocker Protection
| Configuration tool | Path |
|--|--|
| CSP | ./Device/Vendor/MSFT/BitLocker/[AllowSuspensionOfBitLockerProtection](/windows/client-management/mdm/bitlocker-csp#allowsuspensionofbitlockerprotection) |
| Group policy | Not available |
### Choose default folder for recovery password