deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-19 12:23:37 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Adding known block - msi-Http-installations are blocked by Device Guard

Browse Source 
The recommended solution is to download the file locally (or an SMB share) and run it from there.
This commit is contained in:
Kaushik Ainapure
2018-04-23 16:58:24 +00:00
committed by GitHub
parent ba5cdb4d2b
commit 862bffc73e
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
windows/security/threat-protection/device-guard/requirements-and-deployment-planning-guidelines-for-device-guard.md
View File

@ -149,6 +149,14 @@ We recommend that you keep the original XML file for use when you need to merge
When the WDAC policy is deployed, it restricts the software that can run on a device. The XML document can be signed, helping to add additional protection against administrative users changing or removing the policy. When the WDAC policy is deployed, it restricts the software that can run on a device. The XML document can be signed, helping to add additional protection against administrative users changing or removing the policy.
## msi-Http-installations are blocked by Device Guard
When you install msi-files over a Device Guard protected machine directly from the internet, it would fail.
If you try to install a msi-file using this command-line:
- msiexec –i https://download.microsoft.com/download/2/E/3/2E3A1E42-8F50-4396-9E7E-76209EA4F429/Windows10_Version_1511_ADMX.msi
You need to download the MSI file and run it locally:
- Msiexec –i c:\temp\Windows10_Version_1511_ADMX.msi 
## Related topics ## Related topics
- [Planning and getting started on the Windows Defender Device Guard deployment process](planning-and-getting-started-on-the-device-guard-deployment-process.md) - [Planning and getting started on the Windows Defender Device Guard deployment process](planning-and-getting-started-on-the-device-guard-deployment-process.md)