deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-20 12:53:38 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

added images

Browse Source
This commit is contained in:
Justin Hall
2018-12-14 11:39:11 -08:00
parent b0d0410ce3
commit 7f1a9d652b
4 changed files with 12 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

BIN
windows/security/threat-protection/windows-defender-system-guard/images/secure-launch-msinfo.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 240 KiB

BIN
windows/security/threat-protection/windows-defender-system-guard/images/secure-launch-registry.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 35 KiB

BIN
windows/security/threat-protection/windows-defender-system-guard/images/secure-launch-security-app.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 47 KiB

15
windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md
View File

@ -8,7 +8,7 @@ ms.sitesec: library
ms.pagetype: security
ms.localizationpriority: medium
author: justinha
ms.date: 12/13/2018
ms.date: 12/15/2018
---
# System Guard Secure Launch and SMM protection
@ -75,12 +75,13 @@ System Guard Secure Launch can be configured for Mobile Device Management (MDM)
1. Click **Start** > type and then click **Edit group policy**.
2. Click **Computer Configuration** > **Administrative Templates** > **System** > **Device Guard** > **Turn On Virtualization Based Security** > **Secure Launch Configuration**.
![Secure launch Group Policy](images/secure-launch-group-policy.png)
![Secure Launch Group Policy](images/secure-launch-group-policy.png)
### Windows Security app
Click **Start** > **Settings** > **Update & Security** > **Windows Security** > **Open Windows Security** > **Device security** > **Core isolation** > **Firmware protection**.
![Secure Launch Security App](images/secure-launch-security-app.png)
### Registry
@ -90,6 +91,14 @@ System Guard Secure Launch can be configured for Mobile Device Management (MDM)
4. Right-click **SystemGuard** > **New** > **DWORD (32-bit) Value** and name the new DWORD **Enabled**.
5. Double-click **Enabled**, change the value to **1**, and click **OK**.
![Secure Launch Registry](images/secure-launch-registry.png)
## How to verify System Guard Secure Launch is configured and running
To verify that Secure Launch is running, use System Information (MSInfo32). Click **Start**, search for **System Information**, and look under **Virtualization-based Security Services Running** and **Virtualization-based Security Services Configured**.
![Secure Launch Security App](images/secure-launch-msinfo.png)