mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-17 19:33:37 +00:00
Rename Windows Security app
This commit is contained in:
@ -2,7 +2,7 @@
|
||||
title: TPM Group Policy settings
|
||||
description: This topic describes the Trusted Platform Module (TPM) Services that can be controlled centrally by using Group Policy settings.
|
||||
ms.topic: conceptual
|
||||
ms.date: 02/02/2023
|
||||
ms.date: 07/31/2023
|
||||
---
|
||||
|
||||
# TPM Group Policy settings
|
||||
@ -102,32 +102,36 @@ If you do not configure this policy setting, a default value of 9 is used. A val
|
||||
|
||||
## Configure the system to use legacy Dictionary Attack Prevention Parameters setting for TPM 2.0
|
||||
|
||||
Introduced in Windows 10, version 1703, this policy setting configures the TPM to use the Dictionary Attack Prevention Parameters (lockout threshold and recovery time) to the values that were used for Windows 10 Version 1607 and below.
|
||||
Introduced in Windows 10, version 1703, this policy setting configures the TPM to use the Dictionary Attack Prevention Parameters (lockout threshold and recovery time) to the values that were used for Windows 10 Version 1607 and below.
|
||||
|
||||
> [!IMPORTANT]
|
||||
> Setting this policy will take effect only if:
|
||||
> - The TPM was originally prepared using a version of Windows after Windows 10 Version 1607
|
||||
> - The system has a TPM 2.0.
|
||||
>
|
||||
> Setting this policy will take effect only if:
|
||||
>
|
||||
> - The TPM was originally prepared using a version of Windows after Windows 10 Version 1607
|
||||
> - The system has a TPM 2.0.
|
||||
|
||||
> [!NOTE]
|
||||
> Enabling this policy will only take effect after the TPM maintenance task runs (which typically happens after a system restart). Once this policy has been enabled on a system and has taken effect (after a system restart), disabling it will have no impact and the system's TPM will remain configured using the legacy Dictionary Attack Prevention parameters, regardless of the value of this group policy. The only ways for the disabled setting of this policy to take effect on a system where it was once enabled are to either:
|
||||
>
|
||||
> - Disable it from group policy
|
||||
> - Clear the TPM on the system
|
||||
|
||||
## TPM Group Policy settings in the Windows Security app
|
||||
## TPM Group Policy settings in Windows Security
|
||||
|
||||
You can change what users see about TPM in the Windows Security app. The Group Policy settings for the TPM area in the Windows Security app are located at:
|
||||
You can change what users see about TPM in **Windows Security**. The Group Policy settings for the TPM area in **Windows Security** are located at:
|
||||
|
||||
**Computer Configuration\\Administrative Templates\\Windows Components\\Windows Security\\Device security**
|
||||
**Computer Configuration\\Administrative Templates\\Windows Components\\Windows Security\\Device security**
|
||||
|
||||
### Disable the Clear TPM button
|
||||
If you don't want users to be able to click the **Clear TPM** button in the Windows Security app, you can disable it with this Group Policy setting. Select **Enabled** to make the **Clear TPM** button unavailable for use.
|
||||
|
||||
If you don't want users to be able to click the **Clear TPM** button in **Windows Security**, you can disable it with this Group Policy setting. Select **Enabled** to make the **Clear TPM** button unavailable for use.
|
||||
|
||||
### Hide the TPM Firmware Update recommendation
|
||||
|
||||
If you don't want users to see the recommendation to update TPM firmware, you can disable it with this setting. Select **Enabled** to prevent users from seeing a recommendation to update their TPM firmware when a vulnerable firmware is detected.
|
||||
|
||||
## Related topics
|
||||
|
||||
- [Trusted Platform Module](trusted-platform-module-top-node.md)
|
||||
- [Trusted Platform Module](trusted-platform-module-top-node.md)
|
||||
- [TPM Cmdlets in Windows PowerShell](/powershell/module/trustedplatformmodule/?view=win10-ps&preserve-view=true)
|
||||
- [Prepare your organization for BitLocker: Planning and Policies - TPM configurations](../../operating-system-security/data-protection/bitlocker/prepare-your-organization-for-bitlocker-planning-and-policies.md)
|
||||
|
Reference in New Issue
Block a user