mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-15 10:23:37 +00:00
Merge remote-tracking branch 'refs/remotes/origin/master' into atp-troubleshoot-update
This commit is contained in:
@ -16,8 +16,8 @@ This topic lists new and updated topics in the [Keep Windows 10 secure](index.md
|
||||
## March 2017
|
||||
|New or changed topic |Description |
|
||||
|---------------------|------------|
|
||||
|[Protect derived domain credentials with Credential Guard](credential-guard.md) |Updated to include additional security qualifications starting with Window 10, version 1703.|
|
||||
|[Requirements and deployment planning guidelines for Device Guard](requirements-and-deployment-planning-guidelines-for-device-guard.md) |Updated to include additional security qualifications starting with Window 10, version 1703.|
|
||||
|[Protect derived domain credentials with Credential Guard](credential-guard.md) |Updated additional security qualifications.|
|
||||
|[Requirements and deployment planning guidelines for Device Guard](requirements-and-deployment-planning-guidelines-for-device-guard.md) |Updated additional security qualifications.|
|
||||
|
||||
|
||||
## January 2017
|
||||
|
@ -126,9 +126,9 @@ The following tables describe baseline protections, plus protections for improve
|
||||
|
||||
<br>
|
||||
|
||||
#### 2017 Additional security qualifications starting with Windows 10, version 1703
|
||||
#### 2017 Additional security qualifications starting in 2017
|
||||
|
||||
The following table lists qualifications for Windows 10, version 1703, which are in addition to all preceding qualifications.
|
||||
The following table lists qualifications for 2017, which are in addition to all preceding qualifications.
|
||||
|
||||
| Protection for Improved Security | Description |
|
||||
|---------------------------------------------|----------------------------------------------------|
|
||||
|
@ -43,10 +43,10 @@ The following table lists the actual and effective default values for this polic
|
||||
| - | - |
|
||||
| Default Domain Policy| Not defined|
|
||||
| Default Domain Controller Policy | Not defined|
|
||||
| Stand-Alone Server Default Settings | 14 days|
|
||||
| DC Effective Default Settings | 14 days |
|
||||
| Member Server Effective Default Settings| 14 days |
|
||||
| Client Computer Effective Default Settings | 14 days|
|
||||
| Stand-Alone Server Default Settings | 5 days|
|
||||
| DC Effective Default Settings | 5 days |
|
||||
| Member Server Effective Default Settings| 5 days |
|
||||
| Client Computer Effective Default Settings | 5 days|
|
||||
|
||||
## Policy management
|
||||
|
||||
@ -74,11 +74,11 @@ If user passwords are configured to expire periodically in your organization, us
|
||||
|
||||
### Countermeasure
|
||||
|
||||
Configure the **Interactive logon: Prompt user to change password before expiration** setting to 14 days.
|
||||
Configure the **Interactive logon: Prompt user to change password before expiration** setting to 5 days.
|
||||
|
||||
### Potential impact
|
||||
|
||||
Users see a dialog-box prompt to change their password each time that they log on to the domain when their password is configured to expire in 14 or fewer days.
|
||||
Users see a dialog-box prompt to change their password each time that they log on to the domain when their password is configured to expire in 5 or fewer days.
|
||||
|
||||
## Related topics
|
||||
|
||||
|
@ -62,7 +62,7 @@ The following tables provide more information about the hardware, firmware, and
|
||||
|
||||
The following tables describes additional hardware and firmware requirements, and the improved security that is available when those requirements are met.
|
||||
|
||||
### Additional Qualification Requirements starting with Windows 10, version 1507, and Windows Server 2016, Technical Preview 4
|
||||
### Additional security qualificationqs starting with Windows 10, version 1507, and Windows Server 2016, Technical Preview 4
|
||||
|
||||
| Protections for Improved Security - requirement | Description |
|
||||
|---------------------------------------------|----------------------------------------------------|
|
||||
@ -70,7 +70,7 @@ The following tables describes additional hardware and firmware requirements, an
|
||||
|
||||
<br>
|
||||
|
||||
### Additional Qualification Requirements starting with Windows 10, version 1607, and Windows Server 2016
|
||||
### Additional security qualifications starting with Windows 10, version 1607, and Windows Server 2016
|
||||
|
||||
> **Important** The following tables list requirements for improved security, beyond the level of protection described in the preceding tables. You can use Device Guard with hardware, firmware, and software that do not support the following protections for improved security. As your systems meet more requirements, more protections become available to them.
|
||||
|
||||
@ -82,9 +82,9 @@ The following tables describes additional hardware and firmware requirements, an
|
||||
|
||||
<br>
|
||||
|
||||
### Additional Qualification Requirements starting with Windows 10, version 1703
|
||||
### Additional security qualifications starting in 2017
|
||||
|
||||
The following table lists requirements for Windows 10, version 1703, which are in addition to all preceding requirements.
|
||||
The following table lists requirements for 2017, which are in addition to all preceding requirements.
|
||||
|
||||
| Protection for Improved Security | Description |
|
||||
|---------------------------------------------|----------------------------------------------------|
|
||||
|
Reference in New Issue
Block a user