mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-20 21:03:42 +00:00
clean/linted wdsc app browser controls
This commit is contained in:
@ -17,21 +17,18 @@ ms.reviewer:
|
||||
manager: dansimp
|
||||
---
|
||||
|
||||
|
||||
# App and browser control
|
||||
|
||||
**Applies to**
|
||||
|
||||
- Windows 10, version 1703 and later
|
||||
|
||||
|
||||
The **App and browser control** section contains information and settings for Windows Defender SmartScreen. IT administrators and IT pros can get configuration guidance from the [Windows Defender SmartScreen documentation library](https://docs.microsoft.com/windows/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview).
|
||||
|
||||
In Windows 10, version 1709 and later, the section also provides configuration options for Exploit protection. You can prevent users from modifying these specific options with Group Policy. IT administrators can get more information at the [Exploit protection](../windows-defender-exploit-guard/exploit-protection.md) topic in the Windows Defender Exploit Guard library.
|
||||
In Windows 10, version 1709 and later, the section also provides configuration options for Exploit protection. You can prevent users from modifying these specific options with Group Policy. IT administrators can get more information at [Exploit protection](../windows-defender-exploit-guard/exploit-protection.md).
|
||||
|
||||
You can also choose to hide the section from users of the machine. This can be useful if you don't want employees in your organization to see or have access to user-configured options for the features shown in the section.
|
||||
|
||||
|
||||
## Prevent users from making changes to the Exploit protection area in the App & browser control section
|
||||
|
||||
You can prevent users from modifying settings in the Exploit protection area. The settings will be either greyed out or not appear if you enable this setting. Users will still have access to other settings in the App & browser control section, such as those for Windows Defender SmartScreen, unless those options have been configured separately.
|
||||
@ -39,40 +36,42 @@ You can prevent users from modifying settings in the Exploit protection area. Th
|
||||
You can only prevent users from modifying Exploit protection settings by using Group Policy.
|
||||
|
||||
> [!IMPORTANT]
|
||||
>
|
||||
> ### Requirements
|
||||
>
|
||||
> You must have Windows 10, version 1709 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings.
|
||||
|
||||
1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
|
||||
|
||||
3. In the **Group Policy Management Editor** go to **Computer configuration** and click **Administrative templates**.
|
||||
2. In the **Group Policy Management Editor** go to **Computer configuration** and click **Administrative templates**.
|
||||
|
||||
5. Expand the tree to **Windows components > Windows Security > App and browser protection**.
|
||||
3. Expand the tree to **Windows components > Windows Security > App and browser protection**.
|
||||
|
||||
6. Open the **Prevent users from modifying settings** setting and set it to **Enabled**. Click **OK**.
|
||||
4. Open the **Prevent users from modifying settings** setting and set it to **Enabled**. Click **OK**.
|
||||
|
||||
7. [Deploy the updated GPO as you normally do](https://msdn.microsoft.com/library/ee663280(v=vs.85).aspx).
|
||||
5. [Deploy the updated GPO as you normally do](https://msdn.microsoft.com/library/ee663280(v=vs.85).aspx).
|
||||
|
||||
## Hide the App & browser control section
|
||||
|
||||
You can choose to hide the entire section by using Group Policy. The section will not appear on the home page of the Windows Security app, and its icon will not be shown on the navigiation bar on the side of the app.
|
||||
You can choose to hide the entire section by using Group Policy. The section will not appear on the home page of the Windows Security app, and its icon will not be shown on the navigation bar on the side of the app.
|
||||
|
||||
This can only be done in Group Policy.
|
||||
|
||||
> [!IMPORTANT]
|
||||
>
|
||||
> ### Requirements
|
||||
>
|
||||
> You must have Windows 10, version 1709 (the Fall Creators Update). The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings.
|
||||
|
||||
1. On your Group Policy management machine, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
|
||||
|
||||
3. In the **Group Policy Management Editor** go to **Computer configuration** and click **Administrative templates**.
|
||||
2. In the **Group Policy Management Editor** go to **Computer configuration** and click **Administrative templates**.
|
||||
|
||||
5. Expand the tree to **Windows components > Windows Security > App and browser protection**.
|
||||
3. Expand the tree to **Windows components > Windows Security > App and browser protection**.
|
||||
|
||||
6. Open the **Hide the App and browser protection area** setting and set it to **Enabled**. Click **OK**.
|
||||
4. Open the **Hide the App and browser protection area** setting and set it to **Enabled**. Click **OK**.
|
||||
|
||||
7. [Deploy the updated GPO as you normally do](https://msdn.microsoft.com/library/ee663280(v=vs.85).aspx).
|
||||
5. [Deploy the updated GPO as you normally do](https://msdn.microsoft.com/library/ee663280(v=vs.85).aspx).
|
||||
|
||||
> [!NOTE]
|
||||
> If you hide all sections then the app will show a restricted interface, as in the following screenshot:
|
||||
|
Reference in New Issue
Block a user