Cut some duplicate SmartScreen text, other minor edits for threat mitigatns topic

This commit is contained in:
JanKeller1
2017-02-23 19:44:10 -08:00
parent dcbd96a4e9
commit 60f4ff371c
2 changed files with 11 additions and 23 deletions

View File

@ -143,7 +143,7 @@ As of Windows 10, version 1703, you can use code integrity policies not only to
| Approach (as of Windows 10, version 1703) | Guideline |
|---|---|
| You can work from a list of plug-ins, add-ins, or modules that you want only a specific application to be able to run. Other applications would be blocked from running them. | Use `New-CIPolicyRule` with the `-AppID` option. |
| In addition, you can work from a list of plug-ins, add-ins, or modules that you want to block in a specific application. Other applications would be allowed to run them. | Use New-CIPolicyRule with the `-AppID` and `-Deny` options. |
| In addition, you can work from a list of plug-ins, add-ins, or modules that you want to block in a specific application. Other applications would be allowed to run them. | Use `New-CIPolicyRule` with the `-AppID` and `-Deny` options. |
To work with these options, the typical method is to create a policy that only affects plug-ins, add-ins, and modules, then merge it into your master policy (merging is described in the next section).