From 540740033679b01b32735733804b2f9c1a1e7bc3 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 6 Feb 2018 11:08:24 -0800 Subject: [PATCH 1/6] added new UI topion for background apps --- ...ows-operating-system-components-to-microsoft-services.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md b/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md index cb60ffc382..efdd0f54a8 100644 --- a/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md +++ b/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services.md @@ -1485,7 +1485,11 @@ In the **Background Apps** area, you can choose which apps can run in the backgr To turn off **Let apps run in the background**: -- Turn off the feature in the UI for each app. +- In **Background apps**, set **Let apps run in the background** to **Off**. + + -or- + +- In **Background apps**, turn off the feature for each app. -or- From 0c826dec28761769aa6abd56a15a920d6558b447 Mon Sep 17 00:00:00 2001 From: Jeanie Decker Date: Tue, 6 Feb 2018 20:17:11 +0000 Subject: [PATCH 2/6] Merged PR 5738: Clarify instructions for Mixed Reality --- .../application-management/manage-windows-mixed-reality.md | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/windows/application-management/manage-windows-mixed-reality.md b/windows/application-management/manage-windows-mixed-reality.md index 52451ac6a7..4d6181abe1 100644 --- a/windows/application-management/manage-windows-mixed-reality.md +++ b/windows/application-management/manage-windows-mixed-reality.md @@ -23,11 +23,7 @@ Windows 10, version 1709 (also known as the Fall Creators Update), introduces [W ## Enable Windows Mixed Reality in WSUS -To enable users to download the Windows Mixed Reality software, enterprises using WSUS can approve Windows Mixed Reality package by unblocking the following KBs: - -- KB4016509: FeatureOnDemandOasis - Windows 10 version 1703 for x64-based Systems -- KB3180030: language packs -- KB3197985: language packs +To enable users to download the Windows Mixed Reality software for devices running Windows 10, version 1703, enterprises using WSUS can approve Windows Mixed Reality package by unblocking **KB4016509: FeatureOnDemandOasis - Windows 10 version 1703 for x64-based Systems**. Enterprises devices running Windows 10, version 1709, will not be able to install Windows Mixed Reality Feature on Demand (FOD) directly from WSUS. Instead, use one of the following options to install Windows Mixed Reality software: From 2c58c99130cc3d881c47949b2cabd19388e2b493 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 6 Feb 2018 13:43:43 -0800 Subject: [PATCH 3/6] added that forcerecovery persists through restarts until TPM is added or BL suspended --- .../bitlocker/bitlocker-recovery-guide-plan.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/windows/device-security/bitlocker/bitlocker-recovery-guide-plan.md b/windows/device-security/bitlocker/bitlocker-recovery-guide-plan.md index 3463fb30d9..add5645218 100644 --- a/windows/device-security/bitlocker/bitlocker-recovery-guide-plan.md +++ b/windows/device-security/bitlocker/bitlocker-recovery-guide-plan.md @@ -100,15 +100,17 @@ Before you create a thorough BitLocker recovery process, we recommend that you t 1. Click the **Start** button, type **cmd** in the **Start Search** box, right-click **cmd.exe**, and then click **Run as administrator**. 2. At the command prompt, type the following command and then press ENTER: - `manage-bde -forcerecovery ` + ```powershell + `manage-bde -forcerecovery` _BitLockerVolume_ + ``` **To force recovery for a remote computer** 1. On the Start screen, type **cmd.exe**, and then click **Run as administrator**. 2. At the command prompt, type the following command and then press ENTER: - `manage-bde. -ComputerName -forcerecovery ` + `manage-bde. -ComputerName` _RemoteComputerName_ `-forcerecovery` _BitLockerVolume_ -> **Note:**  *ComputerName* represents the name of the remote computer. *Volume* represents the volume on the remote computer that is protected with BitLocker. +> **Note:**  Recovery triggered by `-forcerecovery` persists for multiple restarts until a TPM protector is added or protection is suspended by the user.   ## Planning your recovery process From 0e15e921dcb55aa52ec7d6e1fff80608ba849243 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Tue, 6 Feb 2018 14:27:46 -0800 Subject: [PATCH 4/6] added note about -forcerecovery --- .../bitlocker/bitlocker-recovery-guide-plan.md | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/windows/device-security/bitlocker/bitlocker-recovery-guide-plan.md b/windows/device-security/bitlocker/bitlocker-recovery-guide-plan.md index add5645218..9e780394d7 100644 --- a/windows/device-security/bitlocker/bitlocker-recovery-guide-plan.md +++ b/windows/device-security/bitlocker/bitlocker-recovery-guide-plan.md @@ -100,15 +100,14 @@ Before you create a thorough BitLocker recovery process, we recommend that you t 1. Click the **Start** button, type **cmd** in the **Start Search** box, right-click **cmd.exe**, and then click **Run as administrator**. 2. At the command prompt, type the following command and then press ENTER: - ```powershell - `manage-bde -forcerecovery` _BitLockerVolume_ - ``` + `manage-bde -forcerecovery ` + **To force recovery for a remote computer** 1. On the Start screen, type **cmd.exe**, and then click **Run as administrator**. 2. At the command prompt, type the following command and then press ENTER: - `manage-bde. -ComputerName` _RemoteComputerName_ `-forcerecovery` _BitLockerVolume_ + `manage-bde. -ComputerName -forcerecovery ` > **Note:**  Recovery triggered by `-forcerecovery` persists for multiple restarts until a TPM protector is added or protection is suspended by the user.   From 9f482671b6fc0f6b145009b7541a2ab25f872939 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 7 Feb 2018 08:57:12 -0800 Subject: [PATCH 5/6] replaced screenshot --- .../device-guard/images/wdac-edit-gp.png | Bin 0 -> 18052 bytes ...oy-windows-defender-application-control.md | 26 +++++++++--------- 2 files changed, 13 insertions(+), 13 deletions(-) create mode 100644 windows/device-security/device-guard/images/wdac-edit-gp.png diff --git a/windows/device-security/device-guard/images/wdac-edit-gp.png b/windows/device-security/device-guard/images/wdac-edit-gp.png new file mode 100644 index 0000000000000000000000000000000000000000..17c990ac10cc489ae432fa588e1ec13b2edf6a14 GIT binary patch literal 18052 zcmb5Vbx@mM)IV4Q3KS?%XraiLwz#`PkrsD%3dOa!B@}mPaSs{@S~NJti@OuFXnHJ{c12MuA`X=eE}? zB!u{0m1D-&jp;`j*5NiqNE@7YDkaZW-pN<6WSlT56(^p{z?hdqbcL9uhd$gYNK_qa z7te_QUfM=wZfAO1ZVi34}1GGUlxTc|h)-a&dDK&E9#OL;AnQgUEoT6jo{zl_w zODD){>)^g*o0t&Y3KKLqZrS~ti1}OFU!@oc4-S31ao$!Qx;o`LWf_l{bo%>7@g8HP zZNteF+78V5LeSQ9dAp?-t1K4aR5lkSxaeVe_m$g8z|Gq~&Lpkq`7JAz*V$>Rbv9`- zMU?;Vzmn5g=shz0b`iR=>D=_+3!dOsv+@Bv@-lx3Wi^VtN8VHQ zns*?i`~d~tXEam+2(`t|*)8>A>HMioZhVbCFm(@7nZT9Z( zbKXcJ`|sFM{}ER7@UW|+|`s|7$|GItKW{M|;qR-DEy1dO?j zyAgG45$F6n(t-jG@x=Y_c(~wg&6hD*u1|I`c>6~^r%s_Ok4J8Z1WM_y7$*__vEnUD zPW2Sve$emCG0)>k<5NR@Hbn8%a4R#S!30B_gnU+Weeuv`+*e$?!uv^)yXPg>zPQa+ zhI^Jnxr6$EqRR=rz^hvxF>=09jSmR=LwOl-XW2o;LiK;KTM*2UjITuvz#Pxa!*+a0No~WDCAQ z9E$rKH8*U!_M3~-CbD(rs_Y*(t+(d{flbodXAC|(Px9W(T4w#C{-l8N^JIoMlo5qm z>1IXUbu4VXQEu_iPiJSXR41@Wa-VVdy&POs|Gp9le-qzL48E{T_Ol*e88ziz)qR(?M!XF6(x-QEX+ z?$(`-Q~Jv@z|*H1{q*XE%-niBV%cu%>y*lWct*oMur>(&q0645t+X4V(4dCMFc>2u zqVD7N2kFsFPX507aG>4!&>>Spd=%pBqx@tiB-N2}S^^p912h&*k<-_}O;T{rVd?we zWWQbXEyd<|Y7$1Rb1D|wZof0jnpNa^|5Vv;omeoN5upRNIKle%{`y#*v^<}&!1oTA zdUCN^L&FV1lRjMit9xUyV9E`#CGd={<#Z1*g-ILUW5&R!7B}@FLm{X{j8Q&Py~fP; zuH&9P(!>z@nQt^cy1AD9=ZDdI%!ZXc51mn!OCw47C#&y+m_9zC226=E_Or1sCxIFq zLb+Hc0RASvjX0^hgJM^L8Y(t4t?ksHBn$fK4Md_~N>aR#PfBGq)N?SZUE9jvdEl3F zL!PO=+Ub|mhsB+&eI1|}8HmgBH}KqrlWHJOZ!o;~6}e2Z2Yr+WAs?pwbYXi!4UM^) z0#>_HY&3-_rTwC5vdZzDp2tIBj!LfJ8x-fgn(Gx~O}Xod26{P7s5{{5H&04ROaAn+ z;(_FE6&D#6ScHgB0)K2!&&q~a8heMJLlmT>@AjB$q3Vax)nocEQxB3|%u#L2nFUyr z(**w2Z@EHP4QF~)lS~Ab`1^cHT21pm=!)gCdc_ zPQB@Eu7?!M-rJNdtdom~ojxv=WTgi08odl_ds7D5ckh^5G6NY2ITMKp2}u-`%@reh zg+tZRI(6pcS zk%3GXf-n)Ly+tK6#d=~dMDZ|~m?LMHij46@Et9pJoQ!Kpw74ouNXA7jC>_e>7gVZ9 zwk|JtQXMwyGQ7KZPx{QFfBdIczMP<|Xu>Q&TK>_$*9p?9oAy#9AzQ_!o4d+tOrS@E z{$1XxEGi3h1It#fhsP-G8Yp(L?(k#PwbMo~Z@DBsqx%{BtC+2f`crJi9EoUb`01bY z*)U_|dqb$K!?&Mgy~in!^d@OOoxS&H*j@KMFps&Wpvp8L^rzPRWp8LrMNBw8*NM3K z(qFFr}mxLSDVq~vp@(kXFYR3^@+3%8P&kB1)1br~2}njKW&F zlwO-C4qjZsXO;4u*38NT8put~P^UVcgUzfP6R`LGj5_9T@y*<2hYcFJb{lWz9qxG@ zsGvQ~F^*Li=1Kkv28#`M%$ecV(wD$(dVi=e%+gm!Xl2yrq-{lGR^ir&)5Aircgi7m zKcwGpf@Rw+p*dmEV&5Z;pQk&e2(HWrZ%UXnI`Ej(NqcG8RG%<$0?$mV(&j&q|6U9Bbmp*Bbw}X=j3Du6T z{I*fY%JK2q6FfNQ&FkwwTsfv;U7|)zhK!WFBNFl7^HO>nCAeyfm3xT$<07!CWa#CR zyxm+a{aRz$NGi%4me{VFKJ_0@;Qe9>J{Rav8E~mj`rd%0{N6V7xRB}3!r+Iq!YKtT zWtn>S8FPa!WU&snkMPBRC4Egol^uA$hBq5QV;`zT@35=&#QV&DYNf3S6|^{Pz!E>- z#0|SvIY3dYb??MJ8q=+iq7_*aL!sZc0g-Ziq-1$=$K{pLPYaG1vpB~mZcRO~s*LNu zLgLlH-{1h1FaQsZB0kM4JHU+b%&C8vo@_aItoBH<9B7v96XAAsl|ttlKp=mj`T zE6HP^#Akog*#IQTkoK zE)EW7?KdhAhwaVFi8e~c$7y@}tfe|KYNJQ77B?@up-6v+E|EK*pQk=$Qt`msHHs)V zi>A|q4V8TMCPBW}%x0onjD+Jo`_T5=a&Kt~j-`vPVItbCfUO~FI@iD-IDB0#JPDce z#<7;QIiT6~59EA}EON;4;c&6Z=f)YJa5fKmmF#Y`VH)Npcjy9$7tred^*fmi=d`M~ z67h}*=X&#Tkrlisqcpv!ofDReHdRkpespM>5KkFK?wGawC#J@cI+)}|U*v!>dWE(N z|1taNh@lOi+RrLxaot|vzX!q?=KljBc7q`9?We)bidzaJGddRY7bT0Wa4^V3U4USm%>h)+<9=6G2BR^fF?;y)A-M+vqC}8v*xGtr@f!xd^{k zgTjW57tR+iYFb{6YnP=MO?etTuJ-ZD)s%zqKUi(=n;?iM-gw;>5Ro;vL8oC;mvHzu z6tl8)rFq2{Y{BO#3RPGj=UW|CN#9Q1sQ(%nOU`T3OZFkfD!W-@;HIP`8mZvGx_ z1y6*{IM1N6&JMj?%pw;0$&#IEhBZ7(fxx<$*%LC`&M&8ihf%x98ZfFL5t0d7DuqMh z6xHps4!A=he(Uh2+{RZp(H@l1=7mG8ikZzD5+GiIcQUAP`AhBDpq+z^yY}W}&-!nZ zwrFqh2K;TR%sl^We})2oqESHi=N!n*BqTOe9S*irK z9+i5m4M2n8Id_<2)l48Zaw4%6@0=Hi>xJ+5MJdZ~r`OKnE6?GoOyVHDGlcHZM#dZE zh;ZvA1w1hLEwwSOrFg*_d#-T%bM%nC>KBJ9*1MkiiZZJ1+gzRO|ML#U+J${I;|+Xyg?rPBB!eX7M(JlFk;j7ol$urEE^MY-GWw<5MQ&Se}w z?w=O^M$W!Vp9SLTtmNWtcn!i69nvd$47u&Ra8P2q7diix`E1^1Uo(8w!=^KJO+aRo z?%($J$pVx6zuYMm`Q1IeHlAB~{|UwaGiF>+jIo2K4ud=R6W0h2npzGL$hUE6HhNr@ zpPXAoXSgFb2(NZu(1#1Dh~(nTcbd2q4}tL+OJ?^tvgbnBtTtuBw18lrW*l{YoM;1o z0Wv42%OChf)VszBe3^Hf0R*cl%q_|dk z?v22}>lrV8TQLd(SJ%pn?*WrekBf{Yc9_Nc_B1RdOgCLyrc*Anbj%P5wiz=z&SOJ( z&ya%$*>2C?M%76N`C$!11r6Yzq<#51`{B6X~jYb3}y;i4uGSrOK*A3N~*7n_LC#%15CD*oN ze5r|XttJ?&m3WfQooSkOO;i<<&i66dhn{f$?~B_*A4;Y|7D$kxF{3%9dhnRroDJg) zY7AKtP|?dVFskdMBeACti&0qLkUW;CXR7DF!3)p%&}W1rc~oZ7r|wx z{CkU2j*ovuJE~UJI?QD+gTCx%d>?k#d0ztT*SQ}WBHBy2wM7ZW;KIa#B)KZFmUiCt zfmfnj>Mrd%ZGwV*7y9XG$%HXd6GEqbmHv-X?m_JnYi^yl?cIxS?-WC(LGVL>jhyJc z>GKpI>t2jt5*vl5LD)?l5bv70=H52BLavBJ_P#SoJGZ&A_f_jYi#Bi*I=AI`@mFtZ zX_w`#z!7e6cKr8LP0P;nG5>O%dlnmN$);4XD?Ud#Yr;gN<0GL$mWyMAD)1s{?qIqL zxPLe+B6dVdz71I|=!O^Rx|6F)@R!W=8=4d~`y8J-0szJvH_(?p>#Vm;x;d# z4n=tGEu&_~D@whRw@W^hjBvd^)459FDv`6txXjC3r}i_br*#0zqfdxiZukB(GP09X zb8+pcp(=T?wv%Q1a_6mF#0U9o)po8jb5f91Qqqyn!NtHnH;mJ5_h2PPMm;uyb{n85 zYk&y8FfDc=7BkT_JT_nE_a{FTJh%|lRspPV>(O7`ikW9O+=!oc-P-qTU(IqJqiC*N zEyO*kithcIR%qoHPAtCsv}lWEBqZs~Ho$aaxZRjtsg$yT`|nNXYIZ_|&ow1?uds@C zRGHx0%7ESCmvaXmqT<*~8!-`n{N&=0!0;jeeJ#^vJTaJBb?anF0aOPba+v5?3jKB6 z7XdqCwls=p6<0n4191VBEpInx`!}!|bWB`?RkAt`+pvp&004jGS@wl9=-w1xD~Z_c z0Z28rjLh|EiQ#9Tin-4Gepa-}b>U0_r7F7(p1YUkzM#MS!)xvL>DJ|^!}Q;qygwl; z$3Wa^6Tyg9%je%O6xb(G@w0Gc6XTsTr)fXXBM$(h?U`>LRp~{cK~f{n8uyP~?)c&D zzO9?U3c+*SqF7s(I7B_YV(X@W)}J4N+}M3A$P~c!#r)61H+0^c4ivlu8k;q7ZpiwT zpxlAN@#+I?vh;+(i&a(7q#NjJ&A(p#ZcLtu`xy0wp&z8uj)-4NG!a0X=})ygX^dVQ zcKi_MYdcE$jJx;I{D}J;{Gy2%_O)8%o)lB2khzM*?S9%J6*su%*wNLj53NihXJabb zR)v&)h#+yOc3qzqd~)(9ZH9ffth}hHVUlhznk&@xJ1F%UqyOU_penh;?6iAJDS8kr z>Es7t*J{7riZVVgZ2Rk;nk3Xpv@+XK1T0D>OWU)np!>EeRMRJ3pHLJHeZ*l zXODe>idn?(0%j&Cy1ve~z2zS6dKIz|X4#4*m8_626Vgtns{?{cEv`feHD`6%Q5VhQYg6+5V7;_VpI#@H5%030cXmTXGlt(96Y?IT{gUz z;JHOnz+4v2_9zf#06lT$>%k+|GjAC41c~|GbrR!drB80#rJ|0;`N(R=Q{pp|Nmr+K zOd9sp51awcAvn3dAkTBa(TXNRrmj%+hC(Z;1opU9)v48qAx1*5wv=GnNByUnIf>K# zFTE+9ejfPD57f1&`#CH(bAD1@p2&43&sH1#>Cs{j9+edXQA;&pA%Y<&_ObKGG!y$1 zZ?8>x7OI&DWuC2@eNXE_lyq@b-q?y#NEfL_-n;9eHJqEZQvOvO66MV@KO4d6HMbyQ zsQPYf>5z2N!FP{UTI)@eCw!r-W@FgoeA(oPt)}&2&>$q-muVfo`(1E@ z+>ce`_f)`V_<|BB)jo zrIEtmrai!ZgS}XkT&ZFhu#$7%&?hYZ`7)owEZE%=IYfaeCLx`HZyqP&b)hW_vbhcv_n|5QX0{IT0e}|zt^V; zn)d}8+xF&J6ep3B4)c{N$=o2qE8ihR-G>%q6yRvF=$>;dJ}x8J{lYbUTa0VQ;H!~i z$uezahKzIv$+CNhx8{Faf9Wwb-fh;+8gs{;cus5Sq{)0EVjBfoa8=wiCm0I=ZteKj zBe7Ig<1SjMQ^b$#U@lCo#f}0=huWTtYh>52P3!-rIN#WNk_&SIKI2?mpwYRrhcO)8JNq;(vnLzBRGOcM!LMF@oCBrnZ3yG9BVAt(qaI6vJ?0Pm2y(rrM zCLuCVj7T)APX!|5>5pP?L8I4J&iab5Lmg0sJ^A}NGjeHCMi=wfd2Y!n z{xbJ0mQjpBj6c=OOob@A2*A>AoMs$_Iph(h186XcZUe)Ml~1>qpRr{=HG4f3-O1xv z-IFMbZ5G8y7^5;OdO=~J$oONQbdtHUg$Ut2>Z_`+A34b0PJ!^5Z4O0VeS=z{zlm;} zAIM|YyCaANT(@4J!-iRby#EGb)Q;L!0iF<_GKgMz@>`8i+@{bI5~9Z}MvwVkCU*52 zUMa)yYC^oSVI9ZNMegn(%bt^#oQAr2lhkkD9J;zeeV>|rx6UqBL7zr1zDa$`Jt`8k zk}2|~{=auPkwr&;?>z*`%Xj;&hV!0PFVj1JZ0l7PiIsu%@mRLrUBkUjhxxx9E(yYZ zs~7hwVWI_k;$F8)hJQ~9mY!yQn^2+9zU-f zaoZlY^bq1-4&lAOCLU^5%hnA@>P^Ib&Gw4tN7Ea{h{!*vunf9PoU78)-6GHo93LM) zz44o`PVx?0>|dM1t;aQ=f9@Lz?%&G6H0l#vbPh2v`OF>r4PPNF_Iu=^H42W*{WJliDa4Vv(EZEaZPzetA@;m&)f} z0?f8w)3!qCmSHhFb5q3#jS^IxAKn;w5viAeF3w4!K2^C{F>E_GIUnPQpd_b6T=!wE zc+8~i&%kB99di6qniA8Rg%KZ0=F5!nR-r3HD{vIbK zJ83f!c3<^x1b@s6m<7TOA-*v0WQhY!(gd>gN>Frqis#QPUMA`(CsGA5suA|jy@lD9 zfNQKWaku)|x__ZS{?YZx2-DM*dlh@fD^RN2?T428r-)g2Y};dd;Kz_YD&g-+9eYmV zIAz`+pkuGnV>6%!_4V^nutn{UE{s>HTqHF|BE}TE-$?RGctta;cRl z_MFQ52H*{(=hS&NU1$kb`y$3ptZ2ItzD?Iy*bh7uF>Z9J*iGjhp@*OWeAJwhA+$yXL`RD4<>_<5FXH``)t zeo?zMUchUp*1Unz8_o6`6W#rNs1-)G((DskXf~}E>2daz{Xlx4aPo5Wwi0p9Yz$(s zyp#ghZmx4CH{*~fRM_74H_m4WxJ=CYz#PLz@d{$W(mfN6R1ILN#jNoe@@RUyjBlYw zWv8d|B<-2Vt}^s|1J!gc7RZZ!dGjW7x{yt{YKoF*?5W6VS*B{AlX(%&ci`VTp)THa z8jS*G9Z8$#!YQ8<_Ba#&j^@jXjg(ehw~@?k-SXz!(tt8h+NCPQgfZ?9E?Pkl_^t;J zokcDBcKi2Y*JOQV5%4I^>CXS?GC#{}f1Hv?33=0rHJMR$hL4(Uyx#PWi+DC6pIotc zIsf{H0N0c|H`q6Vx49a;RP}1^3P56kd9;3de%>DsPk)N&rnK=M99d2h!svafUSaW~ zrP#P?x?047_t4-A)&)ykUD-Bf`;ME4DOBKkT8<#DSlK>c+P&)OA)l3f2gOiR&v2O45z;4CZxu_Wnd8VoN5iJLvStI%_fp6F)ufx6%Aj_{@C3Fv03oq35qU zH_dr-#Z77YMxQ?i4X&pt&dzn*2y7O)$s~Vau^XH08|iuUs>wUY^JR{amHtNeLrJJX z!&~aDyKUN3K|tum66zB|`2=*GmhlqYEb;lzn@^`4{u-GTQ^7S|S!`cKeB!1tGFW#< zux2z%4^HvlkQo;N)?@KUeH=0O>OQ!qZ5xN?sc2R|X~BsncyZCq*6K7_A|jpjRaR0H zLsnF=bE;?868h)HYIc=SLk8Qs4HVa!QBL#x>1Er({IGgN?WT}_OTiHP>h`#ejsLT_ z{lqvt^WB}F#HmZig(J1#iXlC>Q)rpDCj_}^Q;~l; zHD*pq`vX}r#$@twTwAj-E^1wir%WVtCSh-_emZSGnRlh4ba=r(A@(U+aK zVYy9Gp0r9Q1xIJN?v2gy`n(xlyoyymbApHbfJTmj#m8fRo` zCe%m&^_e3zE8RVx+1#m0J)i5h*E8B|dg00&?B;&bbfNH4pL@`)NZ4Hs!+S9Ey5vgq zc;g&{1$pnsk{S7WNhmS+?2YzztFlgo8|uO|nRi7{ADZ;?fqQC zJAO&0Lp#?hut;3mi@(ea3LI$DXZp6 zu(GmFi*I_fu@*VC9EYA_f$l()OeLTJ6;bYQ*<~uykuPFalHvi<0W3HlOx!==rf|l==uGGudNt0^hw@YyzV6BcvjOLZ;#-9#OF?;oBW4krzvGwELtjpf4nGd4%B3)+QcPBS&=zZStpT<|y=~kPz z7$I$gGd%&U;8&XO$Ia5|QuWt}kUOz;aBf|THlHW`>Ekm@#nF+;!KUdqbFbEZj)5hY zV-hld6iY22)V492OrBsr9yi{4t(fIJf2GEJiH)5n4yeS5)`1s^9*pL~^R-n;Qc78+p~&-LeX4h&?k`$htZU~w z+zuA%7;~qRD3tjf77D0w+fC)A6PYnJa7xtn2M9`k?|N{`Gic@Y5n@A4%WWRv@j9sf zX%S@h6*O zrY2>jPJQ9TNVyamzsr>3z4|6)cgkhy)6i|zYIP+8|F~rhe;!=dTx0V(>=yOcT3g=$ z>&Z+eAudq1+;ll_Dk&zgTdw9GS7_3dQ5-rTkMmwB3ZfEK3y=WUfS}XgGV&`zuC`5gGsfbCT*|4lSv2- zEE$(pZqdvAO&O|9Kmcv!Xrvz3Ebb6lB;z5Z2;dlZM8m@0eaR_tYNo!~X2Y zD|qc;7Y_mFRzt}$h6?lZ%HidQcZMwyBk#dU6SZD@+7taLxkT+UvnpAiCX(9k zeoY7NS)KSx!eZL{e43{xpAQ4sk0v$d3I<9u4yffn6(&_g{Uo;3obs|;)&M`<)3{$MTKlLy$4lOz;Bz# z>yVbdE4Vo&&K`TOm36K{Q&bx#9I{%-58(7P)zfbI@Z&-VYi`7H5EvyEK7eRlwa*7* z^3M&Zeuw+V#lq>Ypq~fkRBDv2F4(xc9%l;uW~wZ>)e>#5A8ZQK3`$Cl8_xJ4O-n4e--dq`|x$WN)H_kxHbd%8{x*7L#Tw#Kj6eM9Q(_u3DrLRc7rO(kGP{O8iE1 zr9_9Ryu|D11Q5=;ZLJflhi>AxBL7(3@rwiksN-R`s=TzcL_I-FVd3?m=OK^(;C~zq z7^e!`QdC0lhB#bn6Z1Ww&Cmwu^TRSbDC|XCFs;y$;X5shkMm6X;x*JK9BKiQCBYN4 zePy>)5)QNWp_AXf|Eqy`^7W+w)pG1+^Zu$qsFnf$6F8N|cuFr98lj>=+)tCi;vs{; z1A$=o8U?il>vsi*=bp`f-zxobt9P=`bQ;y13lttG zcX-2-nUFd#FyOUK|BmVT@>N8j;|ti;L#aymAL{?DUwQKXvkz3^IFOK%i)b5z2=kt$ zehMLV_@pIAqM!dzq=Kfn0Xi4gWxX4>D=g8|1RqzM%vrZ33{H0z@OYy{b1L%kLn=4R zLrq{zZEo{PshwKf^H}cUhhM4@;!!I4HjNQhbiIRWX?V6b!)~+{N_g8#>ZWbo6&(X= zK}BMY*2R%2@MiWJB^AH47rf#110IKW<*%|J(KDe14qt(ILStwl<~51?5}sE#09$@x zx1+YGRaZibW>RTQ2Ae<#wk1(-lP#g}(lh#$l2z^H2%*XhYFz|o(}|^~hw!Oqjz&nc z-`P9$DygLL*u7em%Z!~d!TwPwd7^3BLaFds4%9ngLH~u?XONEr_M&FKQMo1p-@>|5 z`;)z-s|BsJtuLsFtr~_XaU-^7D;Ax5$E2a^YhxQ!E^#Mi$U~j}gun zJAm|CL{!Q_E%|WM@bR3ohQusLJMYBHMe37$C^Ck@C}%OR4>0`5wK%pDJY2#pV34`|65d)fxwH zS6aSj@C9u&_k6OHT>g=3|9D|!ztaT@Z&!*h#PO|ZR)u@?Bc4#5cP`UVWHf0FJ82lu zrE!zoi6X*|@|qi`;9pEj6Md!iHFQdjc6G2armQF}_qmX2i>|Yk8N1K}-)=E;deYP=5^U6uyP`!qn&*e7y)`MWP zk#pKB(DzSzgLyp-s9dzKV@Z>KsakOb`56<@DG#d6Axq^HOmCO~dK>6! zDj-6>uor%5v)N4PM7%wjVS5rozOpwYJCz)$X!=4+Rrb zQs8~B*$l_TWd>+d3|S~46HHeeV5&8woQ#yezj!wA+GfdZQYlpo&~)eBL!z@fp}@{- z_g7h&>-GMF9HA=-|GZK3C3k6+PFS*AZes@?%fg6Cw`!akrxMBv5Gf#)*3XAX>zP8x z`UR5O$oxbAtt!?2D&y%dP4KhO zr7kg-rDjz86tub!~6*i*Mzq1fYgrDrR{D4xUFHtzGl9WPgUoDH;NTSd# zUH;%cePr9RyyB#HzoR#AoWTZcOUomnOl!MjX2TNv^T=o2Xej~)lPhnjjxkQXxz6m# z-qW8#tCKX7(_e^hZs(I@s)bvuJtn2q!~?ZX8A5;0$wKj>>oye8;u)|>t(fnt`3e%` z_)OtBoeNp9~;V?~_K+&p~qW}!4} zLFf4-6U_Ih)VTo83?+{F=x9}m=r=KeFF_bXaGC*iU}NNt!}3?jfD`JF>;R7~(j`B2lQUQ?rnG052d=j>u!lk)aC1p6_|@VCTSLdab1 z7NYx}6$+?pTJmiYQf-$wR8AT`--^|4>s|Ophh~tR6Fjgo|J}REa*9BnbUvrZu>d4gE@6p)t6}y$}7BY*aCgQ7-d;E$Owky-de% z{xTFiso1C1ieHIqWE?gdIUiIJ?oB!G2AD3l4w_euDAHWt(-dYr>W z)S_*H9qg{F$vTR9sbuXvvWA4Xdlo+>c6y8yjAbmTs;A8}kjgKI6CU6FdO2?o>d+Pa zH$4NSLsP$}lXV9g6pjCb@|RC!80mxA(S`Mf0^;MI;UsxGA97+xtVtlwL=6fb!C#>2R&yomYSwatQjZT;{Ui+Gb`xzTP5hPFIMQdPuS zfys&Tf6fL+U;T1-$w%fWv|`ThNQ+5YlXY5wNd4O49~x|4;uOuHM5%09@EB@d0M2o@#`9I(TSc4IHb>^x6g7^d?yF3KEMpH!!v z|LSjDJ|H`^(xFXoHrSBz+M(eER1p0{>}wvgsT2{c%CPI?oorIC{kGwD>ej22QSy|# z&J-Z<6#e^JnzlepEYh9QADxdt8yaB}ZncP%Z$hIv9!&^u(;1PW3=EN#zFHZ`|Go#v z5T^0qk~j{o?>_aqS@!)_nH_2?CyJM)Fx^Yc?8c?#Y6!NdW;b5mFy^)ZTU1O699_1~ z+34gr(H{bCzSqSm-spd}$aX`u2UFKWZks|-ZI)K3EMe-=bpcg6bS+!kzVd|VRJp?O z(TEUQ0yYBB{$qFSNVk;da8QDR)|<%5RVMAaMdd=G{2+KCf@E*}RMwtH3w1^4 zT$DKN_4cTXzC0(@CM`AG8>;=zg@+0o75iD$yVO7@1L-rB_|lSC(-h*PmgG3wPDPxt z%iA8DLca{zV%IWIZ}SVZc~!2(q4g zw%R-O9jqE>h#M&kSe5ab$L$E&I!%X|R#Taii&A}a{Am*m*2;s%JzzuYmQ(?Rw&Au% zzDi~|{AK?V05M^%;Utw$xkF{!?U3*;{GzS>l{k%j)2&HKw<7zgg+A$aw2|odrs z9h)cVjO-%+5Ki@n@_4Rp4P~a1-|C{v+{-w7S^p(U_xdW!+jJxz-pI`~jL9_|o+T&? zI*50>gKGM0E%hybI^MzGg&TU>1yo4r2c#u|;l}Ot`zG9*^j#R|zGJErAq%Olpc895 zlH@O8jsDFnjvwW8Sj{$&RLMNxqbDfoSFbislM7t5eVd{dtn`!R*;f7CwvHU1d`!bw ze}d{ay687Tp=l_cFK_Z&944pY#`)(?C0`YzlhSDGL``&V>cteR*~4Xnyzwo=zBA*- z#01}SF{4D6=U^p)CA_H}cS+=r3XyJQ>#;rJ!$KDF+O{ve;lM5cEknZV5hZWE*;32&5|G$@7nAMG( z=ml)0*-?`#Y@0{5iAUTDC_Cw-3k|CnbH2Z?w%Pykk2ph^XeZHpuJ{oNV3i&TzHL0Sn1?9#=e5OJqdDH3KPM!F>o}G(^x^sJ^U0IFQ z|JIwOk#NKQrNEkiK{i{MD=W~t9?AUc+s0>ZtFx|gu-DX_w`PGdSwCLL+djAhp&Wb&({c_j` zeNEuq08C7z{_rJ!dB%Zz%Bc2eRjUCj8MuShnOwZE?({j|2RG-G+fkzWr+0$?SA%*k{N__3L<&$%73H7H-mH`GDr=Z{{Za^`rCQ@4=-@ zX&cf*b3@@fGZTzWSMPV zNl7A~O)RetbNdX$J?%s;3R~Z3I>f z0YjA%SU%&16vtn1(2IWwkmemy)DE=JBk~s76i59~U!BH|0j|jf0aD zfguBlcjirjq_H>s-crS#qiJh!OSY1A#XcYGp0ieGu!%^1a9nQ|#AEU=wlHiL#y^bWJb zODQPWkMPN#kc6m+bv~)hnkTR#K~;hNZd&Npt<-iNI!P@8YwRU5riB*4^+f0Omd&@N zs$0!$7UmNLa$9P@{=QV~D*jQGIld9zP@X(-tvea8ES7X9N%Gut>O(dI2`p%2*~k8f z@)`MOSe{#ul-A|a__J1?sbD;0>kp%^1#qo6ef~I$)$4XGPJ8{+nd8l=um7hxNFNr!&1+K74k*%T#&Vr)`LO& z-o(HObo149j|B4VTqCcq<2uIV-#xGYnA9|eyo;&2Tf*{XM{-g)hTsVkf4mRsW;p~> z?=3$6t#{Nha!>O9ES=cCo$ZUixw(0L9D@7$Z1kr~KdpBrvC@X}{~HG~dj4oSn@|`g zZ%p|7sYB(zhkaxGpP-xMqacW3Wg_hIfovOi=%Sd1^L_cm>x6jx&qlur+MeWlpG-nD ziqQEFP5ve4pgX;x1Q5DrJClU{q96_zdbV-&>v{&)6AVz1!fvuX7}U8+WKF5qEBR!9 z@J(}f@bhNV%Fh`yhRFG#<)s)fR`@!ngITiD4MV6`eLnc&D`2H1BWhy67)%o zzxmMv`aBW>@1itf!om2ylpu}DU6Xi8i|Er~rGh*)u2-E!(>zsz4}iQd17G@>2-0 zBr~a!RN?Etc{`_vaHqY3*#{iySu9@+(n4Q}L&L~50~1KLk%_NKq<#Ktp-N`&#pqCx zilL*3c^ND^nB3V&^D zbJ(r+Qa$~1?vkNa)7lnO{H*C^I^PG6$qP649H5j7zdIT-`YJtz;N&ua*>L*H<=_8U zJS~kGQ!~lf(k>_gqCw;G1896jV4$7lQM~$=`ZVo-YewIH@sh$Rpw;2GI{%-jVR`zx zxp~c|XN#1z4#D2=%STos=-`xsaiuW8`)4Gjt(eo*gY^nYkmBHl^;#+xd9vT8^;BnENv!=dJqD_S)!&!bAkMmW@IAx}F7m3DMUD5Hs@F~_4 zaY)~@PO7>fpM*D3QJM_URrU} z5)1v~(P~f9^zVGms-J@$Ju7$X@sy-!g~}X_GTc2{@O88m@(1mm;y{KggeEFjLnBIa ziHxRuALpXeEsLN_Y4jV48RMBRcd9=uo}=TDkc42fN(EtafYjKu(N?InHq?HN14sg7b)KHkKSlEbC<`bM{{e5PsFkhOHV_Z zsVKq9gPQxurrNOLO8kk|kmMZ-U%DNLv-(1uYS zITa4D^vHCBkM<=4j*(kV{r;D)VvIWA|H8nJ1kouO*x0VJ!Y>%hbgrw%YumWYjx=uD z1q_k>w?bNi1WyetvfjT9aA)qYm+$`{j20v~w-c)Dv=Fjs$@njIQi)ETj70$>G?HrE zNzS}g|HU4|R-4IV?8t&3nUp3C3eWoWP+P_)*Hrs6fX%S{9~QK-Eq#CiQIt%g`#zfc zo>&Qb%y-l|1f+pR{=(B&In#5iIx$eYz2jDO8>x-ugsr{0a6pG)xxwB{r zLt10~veG5XT8l^D%E|ecZ?S1YIE0NM6ZNc)7~LrKW7Bg_m}7)(f^0Nb7F}6q_7>aY zig-vq!MPd*KTf!7YCUpXr!7NIAJ2l0J8}yNi(%GrBG2e|2SCT`@>W;-?x|I!N)B>~ z3`!g^J{Osuj)YBpd%b+D{-P5lJ8rHz-oxM1lIPMKcZf=_7@?u+UsP6brtOQ)sUcNQ zf0Y=Rl-HCs|6h~adv^95hZ#CC6CYZw`uRpVc5gLkRO{N*=sA3$dcYKR@y0W0pSgK| zT-D~BtbG}}?@o%lh3JMm-49OheG6O>@SJsp&*_>OVqW*FPgH-OIsMu(9hZLPMUUoR zzx6WQ{QI<^t6Q_qa`gSax_0~dEJeSd6}1@;f7pI)*O?9s_Kcj*oXdcHq&wZfJ;>|5 zcgEPdyHBrwy{M}I*q})4@;Tk6aQBv}!}cw5$9`QDGW*=^8`W`G_C=Dp6>t!>af!5$ z!xRnE8Q)44Dg$>~$#UHFY+5LLt?IG5%hH~cXSSSa=WKdC`S+T|wJ%C{Un#Y$%1c|A zxuPZ1Uo`J}InT!bB8n!tE8N|EFG=`^hOM^IKVerRvN{G>f#}5UC}~>DnSaHH>>LU(40(i%n@$PVY&r zUGXK#XLTU3P2!TW+HJSo?3Ys(zu$e|{>s1FknOV#=Pi?oWlxx>r*XeFWz}|#fV-eJ zf?kknR+lCJ)#e%B4VW!w*Vtypd%pzjwUNK1p5pHnUVp6D{9ecRz3*#xyxDXbXgn8aD}B?Ox#jmRJ`8zh z`2U!6{)0O^i~r2^UHr=b-xL22^Shn(!72;~{`0R{bKvIYE0Mo|C&w^&y85}Sb4q9e0A}lh A?EnA( literal 0 HcmV?d00001 diff --git a/windows/device-security/device-guard/steps-to-deploy-windows-defender-application-control.md b/windows/device-security/device-guard/steps-to-deploy-windows-defender-application-control.md index 380dfc0e0c..7c708e8735 100644 --- a/windows/device-security/device-guard/steps-to-deploy-windows-defender-application-control.md +++ b/windows/device-security/device-guard/steps-to-deploy-windows-defender-application-control.md @@ -1056,37 +1056,37 @@ To deploy and manage a WDAC policy with Group Policy: 1. On a domain controller on a client computer on which RSAT is installed, open the GPMC by running **GPMC.MSC** or searching for “Group Policy Management” in Windows Search. -2. Create a new GPO: right-click an OU, for example, the **DG Enabled PCs OU**, and then click **Create a GPO in this domain, and Link it here**, as shown in Figure 3. +2. Create a new GPO: right-click an OU and then click **Create a GPO in this domain, and Link it here**, as shown in Figure 3. > **Note**  You can use any OU name. Also, security group filtering is an option when you consider different ways of combining WDAC policies (or keeping them separate), as discussed in [Planning and getting started on the Windows Defender Device Guard deployment process](planning-and-getting-started-on-the-device-guard-deployment-process.md). - ![Group Policy Management, create a GPO](images/dg-fig24-creategpo.png) + ![Group Policy Management, create a GPO](images/dg-fig24-creategpo.png) - Figure 3. Create a GPO + Figure 3. Create a GPO -3. Name new GPO **Contoso GPO Test**. This example uses Contoso GPO Test as the name of the GPO. You can choose any name that you prefer for this example. +3. Name new GPO. You can choose any name. 4. Open the Group Policy Management Editor: right-click the new GPO, and then click **Edit**. 5. In the selected GPO, navigate to Computer Configuration\\Administrative Templates\\System\\Windows Defender Device Guard. Right-click **Deploy Windows Defender Application Control** and then click **Edit**. - ![Edit the group policy for Windows Defender Application Control](images/dg-fig25-editcode.png) + ![Edit the Group Policy for Windows Defender Application Control](images/wdac-edit-gp.png) - Figure 4. Edit the group policy for Windows Defender Application Control + Figure 4. Edit the Group Policy for Windows Defender Application Control 6. In the **Deploy Windows Defender Application Control** dialog box, select the **Enabled** option, and then specify the code integrity policy deployment path. - In this policy setting, you specify either the local path in which the policy will exist on the client computer or a Universal Naming Convention (UNC) path that the client computers will look to retrieve the latest version of the policy. For example, with DeviceGuardPolicy.bin on the test computer, the example file path would be C:\\Windows\\System32\\CodeIntegrity\\DeviceGuardPolicy.bin, as shown in Figure 5. + In this policy setting, you specify either the local path in which the policy will exist on the client computer or a Universal Naming Convention (UNC) path that the client computers will look to retrieve the latest version of the policy. For example, with DeviceGuardPolicy.bin on the test computer, the example file path would be C:\\Windows\\System32\\CodeIntegrity\\DeviceGuardPolicy.bin, as shown in Figure 5. - > [!Note] - > The illustration shows the example file name *DeviceGuardPolicy.bin* because this name was used earlier in this topic, in [Create a Windows Defender Application Control policy from a reference computer](#create-a-windows-defender-application-control-policy-from-a-reference-computer). Also, this policy file does not need to be copied to every computer. You can instead copy the WDAC policies to a file share to which all computer accounts have access. Any policy selected here is converted to SIPolicy.p7b when it is deployed to the individual client computers. + > [!Note] + > The illustration shows the example file name *DeviceGuardPolicy.bin* because this name was used earlier in this topic, in [Create a Windows Defender Application Control policy from a reference computer](#create-a-windows-defender-application-control-policy-from-a-reference-computer). Also, this policy file does not need to be copied to every computer. You can instead copy the WDAC policies to a file share to which all computer accounts have access. Any policy selected here is converted to SIPolicy.p7b when it is deployed to the individual client computers. - ![Group Policy called Deploy Windows Defender Application Control](images/dg-fig26-enablecode.png) + ![Group Policy called Deploy Windows Defender Application Control](images/dg-fig26-enablecode.png) - Figure 5. Enable the Windows Defender Application Control policy + Figure 5. Enable the Windows Defender Application Control policy - > [!Note] - > You may have noticed that the GPO setting references a .p7b file and this example uses a .bin file for the policy. Regardless of the type of policy you deploy (.bin, .p7b, or .p7), they are all converted to SIPolicy.p7b when dropped on the client computer running Windows 10. Make your WDAC policies friendly and allow the system to convert the policy names for you to ensure that the policies are easily distinguishable when viewed in a share or any other central repository. + > [!Note] + > You may have noticed that the GPO setting references a .p7b file and this example uses a .bin file for the policy. Regardless of the type of policy you deploy (.bin, .p7b, or .p7), they are all converted to SIPolicy.p7b when dropped on the client computer running Windows 10. Make your WDAC policies friendly and allow the system to convert the policy names for you to ensure that the policies are easily distinguishable when viewed in a share or any other central repository. 7. Close the Group Policy Management Editor, and then restart the Windows 10 test computer. Restarting the computer updates the WDAC policy. For information about how to audit WDAC policies, see the [Audit Windows Defender Application Control policies](#audit-windows-defender-application-control-policies) section. From e4f84a21786c75d6ddb539214918654f564da89e Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 7 Feb 2018 10:36:03 -0800 Subject: [PATCH 6/6] fixed ui reference --- .../steps-to-deploy-windows-defender-application-control.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/device-security/device-guard/steps-to-deploy-windows-defender-application-control.md b/windows/device-security/device-guard/steps-to-deploy-windows-defender-application-control.md index 7c708e8735..0f81162217 100644 --- a/windows/device-security/device-guard/steps-to-deploy-windows-defender-application-control.md +++ b/windows/device-security/device-guard/steps-to-deploy-windows-defender-application-control.md @@ -1068,7 +1068,7 @@ To deploy and manage a WDAC policy with Group Policy: 4. Open the Group Policy Management Editor: right-click the new GPO, and then click **Edit**. -5. In the selected GPO, navigate to Computer Configuration\\Administrative Templates\\System\\Windows Defender Device Guard. Right-click **Deploy Windows Defender Application Control** and then click **Edit**. +5. In the selected GPO, navigate to Computer Configuration\\Administrative Templates\\System\\Device Guard. Right-click **Deploy Windows Defender Application Control** and then click **Edit**. ![Edit the Group Policy for Windows Defender Application Control](images/wdac-edit-gp.png)