From d8767e2b410eeb09e85c3f50dc338cf7c9a6bab6 Mon Sep 17 00:00:00 2001
From: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com>
Date: Wed, 16 Aug 2023 16:53:47 -0400
Subject: [PATCH] updates
---
.../remote-credential-guard.md | 16 ++++++++++------
1 file changed, 10 insertions(+), 6 deletions(-)
diff --git a/windows/security/identity-protection/remote-credential-guard.md b/windows/security/identity-protection/remote-credential-guard.md
index 4e766f429c..0fb4c3629d 100644
--- a/windows/security/identity-protection/remote-credential-guard.md
+++ b/windows/security/identity-protection/remote-credential-guard.md
@@ -186,13 +186,16 @@ When running in *Restricted Admin* or *Remote Credential Guard* mode, participat
[!INCLUDE [intune-settings-catalog-2](../../../includes/configure/intune-settings-catalog-2.md)]
-Alternatively, you can configure devices using a [custom policy][INT-1] with the [DeviceGuard Policy CSP][CSP-1].\
-The policy settings are located under: `./Device/Vendor/MSFT/Policy/Config/DeviceGuard/`.
+Alternatively, you can configure devices using a [custom policy][INT-1] with the [Policy CSP][CSP-2].
-| Setting |
-|--|
-| **Setting name**: Turn On Virtualization Based Security
**Policy CSP name**: `EnableVirtualizationBasedSecurity` |
-| **Setting name**: Restrict delegation of credentials to remote servers
**Policy CSP name**: `LsaCfgFlags` |
+| OMA-URI |Data type| Value|
+|-|-|-|
+| `./Device/Vendor/MSFT/Policy/Config/ADMX_CredSsp/RestrictedRemoteAdministration`| string | |
+
+0 = Disabled
+1 = RequireRestrictedAdmin
+2 = RequireRemoteCredentialGuard
+3 = PreferRemoteCredentialGuard
#### [:::image type="icon" source="../images/icons/group-policy.svg" border="false"::: **Group policy**](#tab/gpo)
@@ -259,3 +262,4 @@ Here are some additional considerations for Remote Credential Guard:
[INT-1]: /mem/intune/configuration/settings-catalog
[CSP-1]: /windows/client-management/mdm/policy-csp-credentialsdelegation
+[CSP-2]: /windows/client-management/mdm/policy-csp-admx-credssp
\ No newline at end of file