deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-16 15:27:22 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Merge pull request #772 from kaushika-msft/patch-18

Browse Source 
Adding known block - msi-Http-installations are blocked by Device Guard
This commit is contained in:
Patti Short 2018-04-23 10:15:07 -07:00 committed by GitHub
commit b3a002b236
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
windows/security/threat-protection/device-guard/requirements-and-deployment-planning-guidelines-for-device-guard.md
View File

@ -149,6 +149,14 @@ We recommend that you keep the original XML file for use when you need to merge
When the WDAC policy is deployed, it restricts the software that can run on a device. The XML document can be signed, helping to add additional protection against administrative users changing or removing the policy. When the WDAC policy is deployed, it restricts the software that can run on a device. The XML document can be signed, helping to add additional protection against administrative users changing or removing the policy.
## msi-Http-installations are blocked by Device Guard
When you install msi-files over a Device Guard protected machine directly from the internet, it would fail.
If you try to install a msi-file using this command-line:
- msiexec –i https://download.microsoft.com/download/2/E/3/2E3A1E42-8F50-4396-9E7E-76209EA4F429/Windows10_Version_1511_ADMX.msi
You need to download the MSI file and run it locally:
- Msiexec –i c:\temp\Windows10_Version_1511_ADMX.msi 
## Related topics ## Related topics
- [Planning and getting started on the Windows Defender Device Guard deployment process](planning-and-getting-started-on-the-device-guard-deployment-process.md) - [Planning and getting started on the Windows Defender Device Guard deployment process](planning-and-getting-started-on-the-device-guard-deployment-process.md)