deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-16 07:17:24 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Merge pull request #772 from kaushika-msft/patch-18

Browse Source 
Adding known block - msi-Http-installations are blocked by Device Guard
This commit is contained in:
Patti Short 2018-04-23 10:15:07 -07:00 committed by GitHub
commit b3a002b236
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
windows/security/threat-protection/device-guard/requirements-and-deployment-planning-guidelines-for-device-guard.md
View File

@ -149,6 +149,14 @@ We recommend that you keep the original XML file for use when you need to merge
When the WDAC policy is deployed, it restricts the software that can run on a device. The XML document can be signed, helping to add additional protection against administrative users changing or removing the policy.
## msi-Http-installations are blocked by Device Guard
When you install msi-files over a Device Guard protected machine directly from the internet, it would fail.
If you try to install a msi-file using this command-line:
- msiexec –i https://download.microsoft.com/download/2/E/3/2E3A1E42-8F50-4396-9E7E-76209EA4F429/Windows10_Version_1511_ADMX.msi
You need to download the MSI file and run it locally:
- Msiexec –i c:\temp\Windows10_Version_1511_ADMX.msi 
## Related topics
- [Planning and getting started on the Windows Defender Device Guard deployment process](planning-and-getting-started-on-the-device-guard-deployment-process.md)