deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-16 23:37:22 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

updates

Browse Source
This commit is contained in:
Paolo Matarazzo 2023-08-16 16:53:47 -04:00
parent b289128b34
commit d8767e2b41
1 changed files with 10 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
windows/security/identity-protection/remote-credential-guard.md
View File

@ -186,13 +186,16 @@ When running in *Restricted Admin* or *Remote Credential Guard* mode, participat
[!INCLUDE [intune-settings-catalog-2](../../../includes/configure/intune-settings-catalog-2.md)] [!INCLUDE [intune-settings-catalog-2](../../../includes/configure/intune-settings-catalog-2.md)]
Alternatively, you can configure devices using a [custom policy][INT-1] with the [DeviceGuard Policy CSP][CSP-1].\ Alternatively, you can configure devices using a [custom policy][INT-1] with the [Policy CSP][CSP-2].
The policy settings are located under: `./Device/Vendor/MSFT/Policy/Config/DeviceGuard/`.
| Setting | | OMA-URI |Data type| Value|
|--| |-|-|-|
| **Setting name**: Turn On Virtualization Based Security<br>**Policy CSP name**: `EnableVirtualizationBasedSecurity` | | `./Device/Vendor/MSFT/Policy/Config/ADMX_CredSsp/RestrictedRemoteAdministration`| string | <enabled/> |
| **Setting name**: Restrict delegation of credentials to remote servers<br>**Policy CSP name**: `LsaCfgFlags` |
0 = Disabled
1 = RequireRestrictedAdmin
2 = RequireRemoteCredentialGuard
3 = PreferRemoteCredentialGuard
#### [:::image type="icon" source="../images/icons/group-policy.svg" border="false"::: **Group policy**](#tab/gpo) #### [:::image type="icon" source="../images/icons/group-policy.svg" border="false"::: **Group policy**](#tab/gpo)
@ -259,3 +262,4 @@ Here are some additional considerations for Remote Credential Guard:
[INT-1]: /mem/intune/configuration/settings-catalog [INT-1]: /mem/intune/configuration/settings-catalog
[CSP-1]: /windows/client-management/mdm/policy-csp-credentialsdelegation [CSP-1]: /windows/client-management/mdm/policy-csp-credentialsdelegation
[CSP-2]: /windows/client-management/mdm/policy-csp-admx-credssp