From bfba8f3a5a9041a688d23ddb3dbbaf78af6f4513 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Thu, 29 Jun 2017 20:09:16 +0000 Subject: [PATCH 1/2] Merged PR 2009: Merge maricia-12519820 to master --- windows/client-management/mdm/TOC.md | 2 + ...ng-csp-windowsdefenderapplicationguard.png | Bin 0 -> 17196 bytes ...ew-in-windows-mdm-enrollment-management.md | 4 + .../windowsdefenderapplicationguard-csp.md | 95 ++++++ ...indowsdefenderapplicationguard-ddf-file.md | 290 ++++++++++++++++++ 5 files changed, 391 insertions(+) create mode 100644 windows/client-management/mdm/images/provisioning-csp-windowsdefenderapplicationguard.png create mode 100644 windows/client-management/mdm/windowsdefenderapplicationguard-csp.md create mode 100644 windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 45051db6b8..e929807ac8 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -218,6 +218,8 @@ #### [Win32AppInventory DDF file](win32appinventory-ddf-file.md) ### [WindowsAdvancedThreatProtection CSP](windowsadvancedthreatprotection-csp.md) #### [WindowsAdvancedThreatProtection DDF file](windowsadvancedthreatprotection-ddf.md) +### [WindowsDefenderApplicationGuard CSP](windowsdefenderapplicationguard-csp.md) +#### [WindowsDefenderApplicationGuard DDF file](windowsdefenderapplicationguard-ddf-file.md) ### [WindowsLicensing CSP](windowslicensing-csp.md) #### [WindowsLicensing DDF file](windowslicensing-ddf-file.md) ### [WindowsSecurityAuditing CSP](windowssecurityauditing-csp.md) diff --git a/windows/client-management/mdm/images/provisioning-csp-windowsdefenderapplicationguard.png b/windows/client-management/mdm/images/provisioning-csp-windowsdefenderapplicationguard.png new file mode 100644 index 0000000000000000000000000000000000000000..8e18128149f302d652cc7c0ef0b4f7ce9c8b1c80 GIT binary patch literal 17196 zcmc(`1yq!8+b=q(gribAfQW!JjFf;#OLs{OF@Q*e(jkq6(jg*9ND4>{5<|CihYXUV zq;%I%=Naq$uXEmSef#YFervN9Fz`HgU-7%H>vxB!smNXfQ-VPt&^38EsYf8tg(?sT zXMo@W@EY6+ku7x??Ky_~KS2t@c9`;F6X zmum_FNi@kziEBPLTua%Ahqrp?95i%anYJh7d{C1dJ72(mrzAGPFCYZMeE$<&PW-p8 zed81lTBzHflaa~Gg_@d!6eX6I-irs5y~Yc?6l}|FdRK92==5O9Wd&8JKjqY*il*j0H^T?!(|8R5`~*!kLV%xXx2E9V+ahkoi`G5QLr&@- z_-Qp;ZhZ?FL18c$6iWM~4+QdyW^oO&8Ab4EFNZ1O`<}G9?NfRD*g8EBIT@#k;i8`g z^;7#eZ)~Nal9)y7oxk^`2yN9|0)d(vU4z!v)(-mL3wmvjOdW4jSmRw5j#{l-JZfcD z<)CSB-!VUN#R2(&xZvOS*Cu)omeI!}`~`I4a*6HxQ^(q~nX-^5r<9bM6utfDvi$={`_X2Z`>Vtu=8Wex+(yvxtct6#F;H*8i06Zj8hM4~W;LSc ztw%`HXZpRB+|we;7KR)t)1-_Qgr|!-CJs(cJRVnYKo7NI5cace5x~5)Z&C;#Q7WFs z+&BF)Os}vxO$C1I5m|kFs=pZ*%KeVO##&5rgGooz%(( z;?k}l*={*Q9-^vpz`Qo zyO=5MgBgXw#U1XkC0FYcqamZBWGnY#zC3nfdDdQ8{FtTANf2t|wfJd_wxoFE&Fl1W zbS}SbNjCP%#t6r@?|l3v{3E@d#de=V^h zK5|o)2M45iYY7|?=TUX8U{Zer0?Ek|zQreG9reCT;ug7Bq3ZoNbtduYrjAYnZKDkj zeh8+nl2Z;D6r5qyFedNj-jw3Y6x?J|Ep=CrR=fQarWO;C=-)9F_fTq(C|*DG`)9E- z;56LZ9E{S_h{%V;TH(bpr{8%nrl2Ai>!g!Hl9)((H?P3J~9V~=Y?`MJh_ zDnV%Y>4hK!Z6*^Y9D5ouF_Kj(-dZ&^`Qv&yhMVm5UQbt9#tYG~0s8jNUN%HQ+qo|V zKiM_9i7Rk%$o6ylrE4=^hQ_*-F;`8A0*V=GWjDD4jsxH_nCXC zs6k*_clL|zS^j#brQxtaq01mpUZ^v!xbC@a=JE6)15Zln5YH*k-K*!e^q_|XEeQLa zg1#7B@nGH!^|Wxp07k?WbMh3MUGxKU4)wZF1ZEu^Y4=r z%!yk&13Djph9|NXMFur589|^xd43qE>GKYGAhf`4v!CK3=waG7un5*$(AwJvQGWwG zA@PGs2_k#Ixe-vo)A1_-Pk4zCF>n!%12{)~*bf}6gLx4E-37q_@6p%<@$iEJHvHQ^ zyLs*!l*Dg04a&V#VTX=Hqd;7@wJfSE{7Eeg}=tZ(6b?nB{ z!q7XXoQ9L_?!v;tLuDdRDIQ`VV5_P*MaWI`85~Vegl}UiDS?$e%oZY=vgNJ*>v?M(nlk|x4kggkn}CpIR&UO+z-0@ zm0)6*xovp#c%a@sJ z4$!_&=0{H!=o_!T03O3(m4E}@T1c8yr+u;58DOL~V2jUk@%LCtFj#Xfb5L-2XwNlv1*jHcZTSw+adq+#Po znc1k$bxrSN76+tp6*wqTgY@D@=(=;C700FEyF@nmH8VL1w^5Gll0JgFKfn%Q?y@bB z391K#7tMZ@hCy@T?u^EgObr(T%y&t4cMZ=;dA`l~o_Fx~`#Rr0+XDHq;=z81>moiO zk;pFv`lDSOgPdF2&=3`Nj9rdqCUG# zyu)wGs5|gGBXMKpUt1|Ry)Zp@CSJQ+U^}Iv+~V#UBpD(;ex=tk{%Nwa`<{z7eX!`! zZ1s2qgbOB_q-30#oPJhjPnGY>D>rFaCR);3C^~4^sgXHEPMvGHR9%Pkn5)63hPxM$ zoCks$ZvdL`t>5TOuCf`ucE0;jGBx5gGojaZ-NkMcvP8e+N=2=8_oG6CF6k|~FgHYW z3%SD>b-euu^+8Bih%V`F;*Dor;M(L)J=vB5eGh#0anm8G`K|}i-|1#*?{PY~IHe>a z!+cy3=>?ErI-z#0;Rk%Pm5#*ToBpmQxMl5arc$1mQ+2((;XVw(0+T1O%Qmz1*{vkEBxVU(`dphO^CUi%qFTvp8(m<{ z9Pv5GBU3JTyi~wir7|1?U|hQbz->RqYlH|F*VRo~a_EkBt%o3%oE&;NY)J+c6yyEB zA8uM0O(LJr9*`zk7v`!2zhBr;GK~pnnI#_;;P&Uk7kP3}d1F31@q?!pR8VM9t;#>% zu5+I+YNBRJ=f$eScT-c7`*M2CVWVngKP=dXUqN&CpSo*#)cBh`F(6lHeQz9<>l^d& z=5NtEoYk~(?@xbK&}~+ct5|-h8E=rX!!Bdx0J-WO5@nayPM<~YT-BNTOxHj?(%-?uK;7AjSz+~Tj@_s=)thx$N4HrPn9C3@%nmfHm60D==R!v8~;B#8? zYd3mW?Yau!@J*O9EeENs&>nP=F{~HuukAg7AXLkk#{KlxMlEvjqV^q?fbG%@n=Kp> z;;hrH0i4oS6h2nk{KdxC`hCy#4+^`@Mk#RRZMZqw$LH%|O~D-V+r^?1nhcsfq#qO> z3#PeS3Op}~*A|;IEpv5hv<&1OSF5Y3QvId4W4NmNjd$gbq9T(x)G>OM;}L^BF-R8` z%1lV4td273j!25X1DsQPbgy_+T7Xj`Io@XFr@!(y>Yo_CXHwIwmm2;}SJ(t;drgk^!elDuZ>i#flte21?bau&G<*+I>d%WUB=X*F zoG#zmNYM@Pr3O7FYlJX07V1~Lofg?5dR1?3AbI(tm(SV0Se@_w4PQgj$K}8apHV2( z5|PSn(WB)GBj3jA1ky*H!cK?ZXL~C+y)h0aJRnf%MFf{T!k`A_ zX|_*j1JNPYvsGkK=z1?3UU~Q(h!InS7*Dj^KnXW0F9fz?+HQXb6ZIPfrvj*f(;k=L z3IGWntNkZG^dsyqN|*rwmCtohk0>x`5I&69Wv026=vMchOlEPVb9CT4z$b3uS=QI= zj?Jsuq3drq2!PD5!*QCQ6d-6t72aF3hY4~RLM=mfop_QE1X01{N#PK5%YE6)Ys z1@&qG_nd7l=mR*xdtstTY(Q8GJv|+Xeh4ZB{d%4(;D&kknMi-nFPh_>7-ljKnsRvU z64#Y)U}CcQ>gK(bQFQJ`DO*#Ig@eyCi$#P&{<{f59ar|JfR+8?xF)_BQ+MzsiTMys zhm~F0y8!yQLN0dlJ!VRqF=6YAo{$jWk-wOzFReJWX$v{s*2nE3gQq{hpLRc59?9RD zAb7mo^s8B$W1aPRq<`&4Aj<1O3JrBbFRlZK?<=3x`S042E)C_M)zsxQNQN$;2GxsES-)YO!%bulkGOM)3K6-;5o_(gldYJT0_sL3(t z%SBU9;o$wkS3WS4Mj@)wxL+}CyPbmHM|_yyr(k$`!AZZbfXRqomlXH~FP_VlCXR`W zY8yshVpxZd?juThAN#tfv!v@<-SnOtR=n{u{EUrX0-z6dq!61(Bd_OYVd#hi)clIw zXp}x*+9P$NYaP~w)GcUSh7dN7%ZP8)MbS?my~-cI_VSM-Fvr90#vJXSJV-xl5{8wc|77)F+?%kI&Tc7FFCEkBi)?{62KM`_`ii5M1s}S~!eJQcf_WXU-yN3~^K`p{k zysvVt4=-FWC&VrS4kLzF4FQsutaVlHeDIv8=g?}z;6)Oc%LyxjA8P!+)$u_4sm`jk zh~&@?UN!22C)+=wM60~GeO5p{1Xx{p05`U=$#+M$R114MR7D321pjL(g`zJ?NXj(QX{N7yvj*=o4N>E-=(Vr~jT~K_u`dzkA zP+X$VO?n{S?9tW^inAcmO3p&%i*^%gr4znhn^!&N|~fXL6F&I37RYXsQ6 zk0?h!ch4h(;y$C4<3?*D=2U|-%~~9UQ3G`YGsyfVuwTtlP|(U%HAbxMvreGVvG8Mi z0Z5YC=aWXki<*~#H~c9V@KHC@6tKJZg-h&HA4m(kwzQW=FI@0)NrC;sEq=EM<=?rj!oFMlG(^N9`Jk=BMi_-hI}|mU9_v zzrvURGqB1tylIe0*SD~!U!5j=f_7ZVFt`d>p87kR?%u+nv_^eR z+xGG-807r|dT9I_L2P6(KQF{Oau3rwRXadLE^s!!j5z%G=oJ#)y_rhrT_rL3WSWFE zI6<{v)Z6@rhEpvttzG_yH|^3Nco+KWHbFob9N6aPO9tXTLTMZ`O93oDd&(yY+Nwhz z-eWuHAJL~fr+}GJ& zqHa(ruD>QE-OwK>oEW?2Xua(GD>{k(8=VAHkDKjE4^Z30a<{2c&fZ*RcTjcG+No)Y zkPf5QpIpAa7AK5^dY?U%R$PRi)c-!)!x;=si(vd~v7`7>qJA-BgNDgLM4`;(RXyt6 z{T~W>8xsXZE>e!i=H#{l!FNZ-Kfs;4L*2?@&JIzsZzFW;MlDFS-aOsBV_}K#tK(DD zLxh{$6r@ure4gjQKRUMOVm7dKj& zkd3R~P-zjhMr18B621>HlkuhsuU;bmQC9k#*kFB!-QhJo<*3{25A9w#{s>`716`?I z7rEErR-^1|cUyQL!R%d~l2cZ`B+oMJgiL6eE;`>XajGCnTwAe@XMN7|HI_BloM-=@ zxoSY>sp#jFe4@0o28w@VaW}l}ChO zD!l?K>n=SNrpJl+Yf~H=o8~OZ;ZJ+;1{Esn!pDYpS7)+#-0F5qMD+C`YY!21aHo|L zHMad-55VyfH$hIgZo*h93A+@ZIhR(a33s$_k6V{nz@E9hTkp7VH#O8|U8e4XQDvsg zUJQp#Pety}IgKdI94~Lt4rULUC&)yy+PthMq}#UAR-E(0pzc1&TW|m(lD<9{YlH(3 zkW4`H@#Iy+-zs6F-kaVeyYVu1Z?3DADw}5*2Ah)18IJk?xL9q-Dd00W!(fvUu@Ftl zS5gJD1$In>T{;YH_uIf-cfeiCOJrmx#b}pWIA7KtM2yl|qj$S*jZm)$+T37ptJn=* z_rF7G)HSlc?NDv?^=8*r?Cn@vM<%^YzQ_0E5>0uz-wc+1N;+Om&e47lX|P#cUot2@ z%y_Rh=g_yyzW!#Ji%Pi+lq%|z-mY}`vQ^)w%{@mTx63CG9qx)*vP2C*`jlN!@hWXq zhu*lqckkUXn4u+suhLEE=G|XMiw}Qs2u5&C1I~jEu;TW(GtkQB=KxmuU$oe7R=`en zr^8`aRIf{%{5~YWdlVHFRp309C@3rpp^*f9)CIs5{CijPKkUUS9q7;6&2buqR#sMK z+KBCW)=l9}39iCUCglbO;(K4*qDp|go9AoNzb>;aRZsDTTwz)$rnJeR3AF0#_ zSq<6S0PA8_Wn?b@nK6Z%={sky*VI}5Dp631CP+5(pGh0{#PCDle4>SEdaMu?0BdVj z(3!T(<~q%RkM^J1IK~>CKMQDf<(BhI7if4JSxO4MB%z!cfu+>maY5GQ?HCOvFmyB3F+{xVrn7=4L!a`(M;s95*jBX z>%$b5@iCVs7r)wg(f!`UZ$iP`IhBsG^3Ysu1w|KJ-6zN=MnAx)b$1w-b?p>|SUF)< zMsNA!6@#FmLo zG(5B|Bs)Dder3`rmO=VAkog8SiOL)E`0&O|Uql%@u2~(`<^jZXP`N!`Qd%V~GU<)s zNX`J{i^kdt$l*Mw-^8buXDjn#a9Xq70miG&e7s!Ip;h6 z)6|S>smJG6hR*U`UO}@$X&P0{zc1aBgBm@t*|BAAb?uESg?ebTy^r&D54vvp?3waEz^lcX z>y10tulfpsv9MLL3ekwpVlsX7ckljtBY-QB_Zwya*^;qeFjhO0zJ~0+tDbVc!&NKP z#`>2Un<u8F#J4lj<@E0*nXjGxfZ3;&m$T)+Fq!pz+#V*ju>9ri$l@>MiaL&OES=yOXQ zoh1!jHpjPlxo>$-L7DW`r+&F`GBM;_qemVxVR7aJMZd2 zTSd?+7S%$D0i`UM3WJNwTw}aa&X=vgt9KcZwqTBi$&HT`J1gJO{S(3XznW7tPjrq& zwHIXS*7Z~{s~RBE4sNd1`-dh!oB_AuP5?!{5N37}c+(?d`VyXMHR3-S^o>5xd__y+ z?X$fv^WckT_5OK9orjLO9ha}d)V#q4;vyrWU16Cm^f^0kIz!76<;M|>Le7K3mD1}! zTmc=QY>k}Iyg>BF@^8lF4lxg|RC^?g$}L-Bwgd~qGDJ>O$#?fztb8+tp&#ThMcHOw z9fLGUq?Vnw9jxzIKUpFeBk3KMKhBwzT6`k1)(#05=4K<%NmUls&oVQs4M_cpo&`vLuHHZY`R&<71uv~_=-*nb=M zz4-y|-nc*gH?aI;GYq~1q!WJ7V~MA>wxNH3gk%U%7QBwl!~m`wC4*yF9RcPcFunjGV4FQ7Us(p@|PsrKBc5FIZ z^m->zP4~u?I{f}xlj|YQL0Q2l?Fn0hANiBZnGxFQHiaoEfYDekrU0PGQ=|#?s81;L z`R`x@2bLh$Q^E$_WucjIlJ@x8kpwodb^N+C4{ovfGwo(6fLO4VRyPn{j~i^`I;7zv zW5;Kvx?^)?Z%pI}MN6r1YZ4j1We`vu0SjkXbkytxDlLuKz6L|vVK(S3Bsee1T-0Tak?4l+ z=;J9xxlreA<-lM{hMPt{Ca#Nm%Pn8HOinXu?Vwu! zoGI~Pbp3Bb^I*8@sPW3;`J4rfsLPL1lAW)d{lb`K6VzVV4JIRPEw3tx?>R@gs+400 zOfG)nScjBJb(9U#`CY9IQ;EUtd`sIbY*H5+JMEm*H#5BE%x5z+Xkt65>hQh}W8wI^ zKC1^vR5F?f!?9zalj-p4Z$d{O}oIfL*?G_PZ07L5MAoaJmR$YFSvwKICoz5>K?>~qw*z%KEf7T^Dq z(80MAZn0>aW6rnVg$RmB(H^#DFkStt$HNQfk z_qJ}iuS=$?mx(&a=)8UW_Y_Q9rxJ=S!4Zhy&XW~Oj@M=wxN%2E$TdeggL@bOl{L1# ztA9KV7u)*G$+(L460#&+l)K%nqfq~JoM}wg370SN8D6i4pug^0FcC>awy0}206Q{W zZ@z-wSkEAuKFw;0Tnoxht|~8j9-S&#pW`aC&6{~vjb9n5^Ar|&=5S1~s8d;E6Zr0T zJafk}$ZoBUfjT^4)Mu)oc>`)W!vE1LFOVTl@_wS0Ec%PJj7tYukYzrfp0;kvE44Kb zMpU*%uP|#xpF!DY#;MmiiLO$RFC0Bfe#>ctD6jrG;_b=d3(0K`Ei-*|GQQ80Un_r3 z&2&0Aw7TDX_qP?XKWTRPmlaX=EhDAN9L=hHYUy@Cv#h@f*F^=Dj>@}%yHe_?9XRLb z$XWVfli0ei-J;6^ zuKHRgf$x6DwBLmrinv0d9er=Fx46g=+SuL;jixHCdpmu{jXFbL3%XY?k?1vlAHT=- zZtfOtkao())eYf{Oktr>Dbp6G)$+X7*mptykeaSXF~Z7SFAE-7oel^|0Y~!Yv|i%N zux{X&$gxid>;yko`kO51g&N%1qn>{_=yzHrq5a7~HXK8dG^Z}Ox85z{P0*UWqZ!-le$TA(x~^ zzW-@v7RG5r6p#5G_ypgBo)?6(c!f^q~~sWR7Lew)}#Lk1KmLo8ww>G~D6e{&)K zS0If2!sHTmB5tajVgJBVjp%m_rv4<=v_4lI{#e?7o1FiL83(dP|HyLZvA{{yy^AMWCKTB}K&uFjNQExt;@ML|Sf*zoFzefsD`!K?(9@Cv%e{MD*21 z`p@FiuK<4Wja97r-*c%ockofx^Dn3=G)IYQ!=4`^^=#T7Og`|3DhdBVolO>VvR+zh z!}#ixh&0jOb|c1?3c9)aTRX_gfL%WT13CB};l5f$jX=O{n%?7Al+*8Js80n3*F!@x z2ra^`o)%V=;CL#DT0iBRf1_FB^I38QZ9@F$H)NLts)zl)C*vRYNOqcI+|JF>z7+@~ zDMd}D5fk@-JJ47{n3~xmyQt6)^>(H8D3am>BtEaAOSSxPWbSk3sh%b2&bHNhzQ~n_ z>T6MM@t#X-NL(&bxN2E(l16A2wIZb4mHwZ`L)O`5FO>V2C);NglC_o733#L!`ZY?JYGG zce{n7#K4K9#xWp=99wmc z2MWl?SBobgr0ls!x(Q+tA*2*-k9dJ4K3}X`5Q8J7WBd%afqn`;<$V2xC91jSFwJyNa~>b>+^6{0(f~=n{3{X%%9sC{ z&ym9xDk1q0kW%1$++VN*@)HMS0YE+fQy&19Uld1S+xcU`#&7T%SN6Y^@el-ncWM_0 zBvEKn`mEI2%1!5*sYtXuNCQx2;}_6qD*zUj;{I=azM2eVG=NBktLkN8mJi4%pe#i?KpSmMwAiiP#RnnRM&LY_OWE~)R{631Sl)6(pXu>S?0|us; z6N!N3a=j?Xol)guM7k(*1sg1yjFhj-l%G29*5B@FhXH%`d#L}+XMmvb;Cyfluklks zQBnH_!!L#e0OtV$FR*AJLI;8H0C@GE{{W0}=t&H^o;CIq@UYBhR)O3A7S;hA@kxrj z1XBV)!NC%OeJPE5ehSUc0Q?)4ymR4K!PyJ&FF;Wno7nSL{TXBY^l6&_0yS2bhb8-_L%*vsAjXOQ&Lir|Si8!Y0~VrQpVsu=83dz#~EN!EDD9 zigejab^zJN$>Hy_X0u?-|0jPIvpN^aSUa#3_Mk^mBbl^~+bDipdjhD#6k_LEIuG_< zPjKzVOw5;}N;tPlK8)NT%I=4hb#~;4KsBm%Zo2Yvk7(xvzO#gKnMPEg>`h^6cGL#E z^EEcYb|AR19@dgbIN)kgqqN;xz268H%l#nq+l5V@uC`Y~J5rfZrlk^z-%YaZ|C|)dlH0Tbg`Tl%hw&eeQL5+AwiY zf!fRGs)D+B#l2ZmkLc-2kMa5_SJaKk-Yp&!tFiCCZT1nxF`r?fSBtEp8V(zu6;&7D zR`eH*wT$(V>BZ>DO0CdSAGma>XE>Tsb=Z?Q7`}_I1bBZFzux?&>gsNq}^8P6KRjkCfI+cji26g)uLHbH)ho|nTZ5mBu@ zqF@zsgtLOtqFB>gsxI%!H{I_P3MtRLU8j>h)pO>k44M<;Fje#Xblo#Ij6v2_ z-?+L4Mu;KrTeUvaCJ-o~&~PP|jaie?U7LL)o#9A|uDnmGs?~ExK-@E=#CAQ-EhWW? zrRG~F57Hxhr#LbRD4p|b(|SHFa(bOnA@%R6vUeMt_us&CbZ`9DKj)KriIR_-T`ad| z$F1PIz4_&?b$!*k(sau_YQv(pTl#kC zGepy~yq0a;v%fgr%gew67xvSFa9>0`j=Po#&OYw4v8`skjpiV=Cg1wVA@rpF zL(x*_=hlOfS&|{E{C5oad`wgksF+aVjY@U9rP-Vq6Ee-NL#tYO2>a>kP_TO-*DI3z&e}}(;Uoc=1Dyao{AlHCAcBS`QDy& zIzh~k!jSuE+Q)l0^O`d2sIHgBb67dlB0Yc#2iD4Qe?ZXE1m~M37f5>Tg}cEZjLVrm zCc+AE=3eUvTq_JTw7d8AlK#5!w6P(a7wC1H$?8VFsiIeKJ zD01q41n6ORmO&5@Fei$9DBxYgw(Y;A#5efPB}J{(jAE`=GnB1P`<@d;t&%N&a;y&F zZdAfL!0=AUFGgG4!J(?O`zJ8o9aZX+P_CD%97f@24(wf*pFC15uM!{@2N-z|=Me|~ zIGP`%@&1JIImyOJUp_qIqjQL>9yTpeg|FE`%2*&J=T9RxQKu+wQSt+)5UHE za6m1xpFfzN0yI>exU}(iE30LKpQowqEBz^WSnLh~1}-n!AQUYF`bBunfWqrM_8Nsa z_07^|bd!x@TMe}_+B_9V3o5jD-~yPAIk6qcJ>G7J1!YrXCnN>4teD{B5Pmk|XPr|% z9vSL^dDyCnuSk$(xY|*~?mB)Ye=NI&=*zX2m68wJ?15WSqX>hrKX93(syTqO@K?^b z5Y{JBym733E!UZsIU4UL%QcJwk)}y|-%n2w{9+!wKl^YSxK&gSTtzxmzRb0U6^e6* z6|o@bo4AIP)&^a^w62f_zu@-@mv!`~;zT)IaV1&9m0#2}1B8o;iM2nCsAv#Vf~QAq zKyilu$+X8tvlz{h5iqX(+yUWIJg)lv1)$770V&v^w+~|Qj5>Gr_7?Gxy?|xLHb%p% z9Oo_UL~KUuhYiNSk=eX_V@O^26=4j!)BvH`22K4zM?A+!2I{sM~!0#0EnH3WATp2ToXa%y# zU2!TWWH<@R_PBoARSvT3PS)zu(plM ze!6%tkl*%EXEC%H66xI{W^z>x7YG|!Xy7IE~(l zw}iljHU`syWJ{_Bk3H)X6@QXHkN-sjl@lBDJjns-{aZqpWq><;*x@^PFTq%_bber9 zYz&f)4S9jNzfh924=VXR>wDLlAYB)*4L+tpc~{)rmYuX`6L?0)swO__Mu=x+jkNuK z{_YVh8e;i%IZ3MsV0_l$-JE}@#|!&0n^vdMMQg1+vpR#l07uAp36^jVJ5cJ9Gp_oa zUW#!TkURj3VWOOA*)wbW1?mP3(ov*7pSX<_^~n}TyI7W8?Soi>v-R74Cj$%4Pb`QB zLRg#r2YIj;(D3K9>_K$*)MRMHqo|b0gSK%0^v>!G&`^c)5|=JQN;C8s6|_(1RF197 zSy>yGO*|&=Ks(njBFV`{7Pl=MS5b9Nv4%^?_Hl=Zt=P8b?{SBDM(#8yPJXo}>(jVj zy~aGw?QUIQ`u#cZEZiErLE8bUY_1?p?z`~nKk-`L_SC>DJosCh&7lua;N6grk0`Qdii%5GWC{)0~O zh|Z4vT^WA|!6OQ%0qr3^eiQlLBb}s|LX{1+Q<>X5uaH?T&)EoEX%;0i^^$S3WqY6&<AsD9gcR6kbAY zya0+AFp@areP1IZHc6uaP4Ey)r6#^B{0eho+I%1mkd45W1R(31SJfw zy+hXwzvI;v4II1(Z%Ro56Pot2O)%avh95w_WINBX)EP7h@H-V2?3Cp2oBnOw1ObDi z?miu?xTwb$H=?-0n%ah@&GnDBEm3@~Ct7n`4l9?j*8Sl4fxDuUf@^K~ql<`|X27t?(g9v_(k_luoDSnyUgYc5dcFRxs{0~N#7@Zt zCvGmdHyNQzkyRc=lo9ieJpkKp-{l{@XP5aJ88>s=e2U>n>X7?0CLWAd691P5W>dmn z0JNT;8kk_6Hv=}k@ZY`_2o?4`929v)O=miAG7$oE2zmtQ?Bl$nx$RbsLNke%9ZN(i zQ}y0LKFm!7fS`gv1Hknc;8!(Zhk(1g{D2aIKtBKw0({xJx}J$ad0Df%3+QfQ{~<4} LB88B6?En7&{ct8A literal 0 HcmV?d00001 diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index d71053ae18..f89d128fa4 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1258,6 +1258,10 @@ Also Added [Firewall DDF file](firewall-ddf-file.md). +[WindowsDefenderApplicationGuard CSP](windowsdefenderapplicationguard-csp.md) +New CSP added in Windows 10, version 1709. Also added the DDF topic [WindowsDefenderApplicationGuard DDF file](windowsdefenderapplicationguard-ddf-file.md). + + [DynamicManagement CSP](dynamicmanagement-csp.md) The DynamicManagement CSP is not supported in Windows 10 Mobile and Mobile Enterprise. The table of SKU information in the [Configuration service provider reference](configuration-service-provider-reference.md) was updated. diff --git a/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md b/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md new file mode 100644 index 0000000000..3df07a32ad --- /dev/null +++ b/windows/client-management/mdm/windowsdefenderapplicationguard-csp.md @@ -0,0 +1,95 @@ +--- +title: WindowsDefenderApplicationGuard CSP +description: WindowsDefenderApplicationGuard CSP +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 06/27/2017 +--- + +# WindowsDefenderApplicationGuard CSP + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + +The WindowsDefenderApplicationGuard configuration service provider (CSP) is used by the enterprise to configure the settings in the Application Guard. This CSP was added in Windows 10, version 1709. + +The following diagram shows the WindowsDefenderApplicationGuard configuration service provider in tree format. + +![windowsdefenderapplicationguard csp](images/provisioning-csp-windowsdefenderapplicationguard.png) + +**./Device/Vendor/MSFT/WindowsDefenderApplicationGuard** +

Root node. Supported operation is Get.

+

+ +**Settings** +

Interior node. Supported operation is Get.

+ +**Settings/AllowWindowsDefenderApplicationGuard** +

Turn on Windows Defender Application Guard in Enterprise Mode. Value type is integer. Supported operations are Add, Get, Replace, and Delete.

+ + - 0 - Stops Application Guard in Enterprise Mode. Trying to access non-enterprise domains on the host will not automatically get transferred into the insolated environment. + - 1 - Enables Application Guard in Enterprise Mode. Trying to access non-enterprise websites on the host will automatically get transferred into the container. + +**Settings/ClipboardFileType** +

Determines the type of content that can be copied from the host to Application Guard environment and vice versa. Value type is integer. Supported operations are Add, Get, Replace, and Delete.

+ +- 0 - Allow text copying. +- 1 - Allow text and image copying. + +**Settings/ClipboardSettings** +

This policy setting allows you to decide how the clipboard behaves while in Application Guard. Value type is integer. Supported operations are Add, Get, Replace, and Delete

+ +- 0 (default) - Completely turns Off the clipboard functionality for the Application Guard. +- 1 - Turns On the clipboard functionality and lets you choose whether to additionally enable copying of certain content from Application Guard into Microsoft Edge and enable copying of certain content from Microsoft Edge into Application Guard. + +> [!Important] +> Allowing copied content to go from Microsoft Edge into Application Guard can cause potential security risks and isn't recommended. + +**Settings/PrintingSettings** +

This policy setting allows you to decide how the print functionality behaves while in Application Guard. Value type is integer. Supported operations are Add, Get, Replace, and Delete.

+ +- 0 - Disables all print functionality (default) +- 1 - Enables only XPS printing +- 2 - Enables only PDF printing +- 3 - Enables both PDF and XPS printing +- 4 - Enables only local printing +- 5 - Enables both local and XPS printing - 6 - Enables both local and PDF printing +- 7 - Enables local, PDF, and XPS printing +- 8 - Enables only network printing +- 9 - Enables both network and XPS printing +- 10 - Enables both network and PDF printing +- 11 - Enables network, PDF, and XPS printing +- 12 - Enables both network and local printing +- 13 - Enables network, local, and XPS printing +- 14 - Enables network, local, and PDF printing +- 15 - Enables all printing + +**Settings/BlockNonEnterpriseContent** +

This policy setting allows you to decide whether websites can load non-enterprise content in Microsoft Edge and Internet Explorer. Value type is integer. Supported operations are Add, Get, Replace, and Delete.

+ +- 0 - Non-enterprise content embedded on enterprise sites are stopped from opening in Internet Explorer or Microsoft Edge outside of Windows Defender Application Guard. +- 1 (default) - Non-enterprise sites can open outside of the Windows Defender Application Guard container, directly in Internet Explorer and Microsoft Edge. + +**Settings/AllowPersistence** +

This policy setting allows you to decide whether data should persist across different sessions in Application Guard. Value type is integer. Supported operations are Add, Get, Replace, and Delete.

+ +- 0 - Application Guard discards user-downloaded files and other items (such as, cookies, Favorites, and so on) during machine restart or user log-off. +- 1 - Application Guard saves user-downloaded files and other items (such as, cookies, Favorites, and so on) for use in future Application Guard sessions. + +**Status** +

Returns status on Application Guard installation and pre-requisites. Value type is integer. Supported operation is Get.

+ +**InstallWindowsDefenderApplicationGuard** +

Initiates remote installation of Application Guard feature. Supported operations are Get and Execute.

+ +**Audit** +

Interior node. Supported operation is Get

+ +**Audit/AuditApplicationGuard** +

This policy setting allows you to decide whether auditing events can be collected from Application Guard. Value type in integer. Supported operations are Add, Get, Replace, and Delete.

+ +- 0 (default) - - Audit event logs aren't collected for Application Guard. +- 1 - Application Guard inherits its auditing policies from Microsoft Edge and starts to audit system events specifically for Application Guard. diff --git a/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md b/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md new file mode 100644 index 0000000000..d70c704083 --- /dev/null +++ b/windows/client-management/mdm/windowsdefenderapplicationguard-ddf-file.md @@ -0,0 +1,290 @@ +--- +title: WindowsDefenderApplicationGuard DDF file +description: WindowsDefenderApplicationGuard DDF file +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 06/27/2017 +--- + +# WindowsDefenderApplicationGuard DDF file + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + +This topic shows the OMA DM device description framework (DDF) for the **WindowsDefenderApplicationGuard** configuration service provider. + +``` syntax + +]> + + 1.2 + + WindowsDefenderApplicationGuard + ./Vendor/MSFT + + + + + + + + + + + + + + + com.microsoft/1.1/MDM/WindowsDefenderApplicationGuard + + + + Settings + + + + + + + + + + + + + + + + + + + AllowWindowsDefenderApplicationGuard + + + + + + + + + + + + + + + + + + text/plain + + + + + ClipboardFileType + + + + + + + + + + + + + + + + + + text/plain + + + + + ClipboardSettings + + + + + + + + + + + + + + + + + + text/plain + + + + + PrintingSettings + + + + + + + + + + + + + + + + + + text/plain + + + + + BlockNonEnterpriseContent + + + + + + + + + + + + + + + + + + text/plain + + + + + AllowPersistence + + + + + + + + + + + + + + + + + + text/plain + + + + + + Status + + + + + + + + + + + + + + + text/plain + + + + + InstallWindowsDefenderApplicationGuard + + + + + + + + + + + + + + + + text/plain + + + + + Audit + + + + + + + + + + + + + + + + + + + AuditApplicationGuard + + + + + + + + + + + + + + + + + + text/plain + + + + + + +``` \ No newline at end of file From 242bc20c6f51e78073a403adc5404291e3119a43 Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Thu, 29 Jun 2017 20:09:32 +0000 Subject: [PATCH 2/2] Merged PR 2010: Merge maricia-12123172 to master --- .../configuration-service-provider-reference.md | 16 ++++++++-------- .../new-in-windows-mdm-enrollment-management.md | 4 ++++ 2 files changed, 12 insertions(+), 8 deletions(-) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index b9c1c1cd51..92227beb06 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -275,11 +275,11 @@ Footnotes: Mobile Enterprise - cross mark - cross mark + check mark3 + check mark3 - cross mark - cross mark + check mark3 + check mark3 check mark check mark @@ -359,11 +359,11 @@ Footnotes: Mobile Enterprise - cross mark - cross mark + check mark3 + check mark3 - cross mark - cross mark + check mark3 + check mark3 check mark check mark diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index f89d128fa4..2527387dd9 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1265,6 +1265,10 @@ Also Added [Firewall DDF file](firewall-ddf-file.md). [DynamicManagement CSP](dynamicmanagement-csp.md) The DynamicManagement CSP is not supported in Windows 10 Mobile and Mobile Enterprise. The table of SKU information in the [Configuration service provider reference](configuration-service-provider-reference.md) was updated. + +[CM_ProxyEntries CSP](cm-proxyentries-csp.md) and [CMPolicy CSP](cmpolicy-csp.md) +In Windows 10, version 1709, support for desktop SKUs were added to these CSPs. The table of SKU information in the [Configuration service provider reference](configuration-service-provider-reference.md) was updated. +