From bea0ba71425301f85f6e1eda5c146ae29109c016 Mon Sep 17 00:00:00 2001 From: jsuther1974 Date: Wed, 14 Jun 2023 09:46:21 -0700 Subject: [PATCH 1/3] Add ARM deny rules for vulnerable HVCIScan --- .../microsoft-recommended-block-rules.md | 24 +++++++++++++++++-- 1 file changed, 22 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md b/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md index 26b82ac4e8..3b7f22c1df 100644 --- a/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md +++ b/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-block-rules.md @@ -8,7 +8,7 @@ author: jsuther1974 ms.reviewer: jgeurten ms.author: vinpa manager: aaroncz -ms.date: 06/13/2023 +ms.date: 06/14/2023 ms.topic: reference --- @@ -118,7 +118,7 @@ The blocklist policy that follows includes "Allow all" rules for both kernel and ```xml - 10.1.0.1 + 10.1.0.2 {A244370E-44C9-4C06-B551-F6016E563076} {2E07F7E4-194C-4D20-B7C9-6F44A6C5A234} @@ -163,6 +163,10 @@ The blocklist policy that follows includes "Allow all" rules for both kernel and + + + + @@ -1508,6 +1512,10 @@ The blocklist policy that follows includes "Allow all" rules for both kernel and + + + + @@ -1515,6 +1523,18 @@ The blocklist policy that follows includes "Allow all" rules for both kernel and 0 + + + + Microsoft Windows Recommended User Mode BlockList + + + + + 10.1.0.2 + + + ``` From 3291573c742c46887caebb690688aaadb228865f Mon Sep 17 00:00:00 2001 From: Andrew Nielsen Date: Wed, 14 Jun 2023 14:55:19 -0600 Subject: [PATCH 2/3] Clarified content around WDS as it relates to MDT. --- windows/deployment/wds-boot-support.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/wds-boot-support.md b/windows/deployment/wds-boot-support.md index 6849160ab4..9219e1e311 100644 --- a/windows/deployment/wds-boot-support.md +++ b/windows/deployment/wds-boot-support.md @@ -38,7 +38,7 @@ The table below provides support details for specific deployment scenarios. Boot ## Reason for the change -Alternatives to WDS, such as [Microsoft Configuration Manager](/mem/configmgr/) and [Microsoft Deployment Toolkit](/mem/configmgr/mdt/) (MDT) provide a better, more flexible, and feature-rich experience for deploying Windows images. +Alternatives to WDS, such as [Microsoft Configuration Manager](/mem/configmgr/) and [Microsoft Deployment Toolkit](/mem/configmgr/mdt/) (MDT) provides a better, more flexible, and feature-rich experience for deploying Windows images in certain scenarios. [Utilizing MDT with Windows 11 is not supported.](/mem/configmgr/mdt/known-issues.md). ## Not affected From ef68d6c759dfdf293e3ef265e20fa1fdc7de8ca8 Mon Sep 17 00:00:00 2001 From: Frank Rojas <45807133+frankroj@users.noreply.github.com> Date: Wed, 14 Jun 2023 17:20:17 -0400 Subject: [PATCH 3/3] Reformat support statement Reformat support statement --- windows/deployment/wds-boot-support.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/windows/deployment/wds-boot-support.md b/windows/deployment/wds-boot-support.md index 9219e1e311..5c34ff5222 100644 --- a/windows/deployment/wds-boot-support.md +++ b/windows/deployment/wds-boot-support.md @@ -38,7 +38,11 @@ The table below provides support details for specific deployment scenarios. Boot ## Reason for the change -Alternatives to WDS, such as [Microsoft Configuration Manager](/mem/configmgr/) and [Microsoft Deployment Toolkit](/mem/configmgr/mdt/) (MDT) provides a better, more flexible, and feature-rich experience for deploying Windows images in certain scenarios. [Utilizing MDT with Windows 11 is not supported.](/mem/configmgr/mdt/known-issues.md). +Alternatives to WDS, such as [Microsoft Configuration Manager](/mem/configmgr/) and [Microsoft Deployment Toolkit](/mem/configmgr/mdt/) (MDT) provide a better, more flexible, and feature-rich experience for deploying Windows images. + +> [!NOTE] +> +> [Microsoft Deployment Toolkit](/mem/configmgr/mdt/) (MDT) only supports deployment of Windows 10. It doesn't support deployment of Windows 11. For more information, see [Supported platforms](/mem/configmgr/mdt/release-notes#supported-platforms). ## Not affected