From ece36be2568a1545fa938a66853d38a57d01aa37 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Thu, 15 Mar 2018 13:45:23 -0700 Subject: [PATCH] revised intune steps --- ...irtualization-based-protection-of-code-integrity.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md b/windows/security/threat-protection/windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md index 026b2d59d9..cddedfc8f8 100644 --- a/windows/security/threat-protection/windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md +++ b/windows/security/threat-protection/windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md @@ -27,9 +27,9 @@ If this happens, see [Troubleshooting](#troubleshooting) for remediation steps. beginning with Windows 10, version 1803 you can use [Windows Defender Security Center](#enable-hvci-using-windows-defender-security-center) to enable HVCI on a workgroup computer. -To enable HVCI on Windows 10 devices across an enterprise, use any of these options: +To enable HVCI on Windows 10 devices with supporting hardware throughout an enterprise, use any of these options: +- [Microsoft Intune (or another MDM provider)](#enable-hvci-using-intune) - [Group Policy](#enable-hvci-using-group-policy) -- Windows Intune (or another MDM provider) - [System Center Configuration Manager](https://cloudblogs.microsoft.com/enterprisemobility/2015/10/30/managing-windows-10-device-guard-with-configuration-manager/) @@ -38,7 +38,11 @@ To enable HVCI on Windows 10 devices across an enterprise, use any of these opti Windows Defender Security Center to enable HVCI . 1. Click **Start** > **Settings** > **Update & security** > **Windows Security** > **Open Windows Defender Security Center**. -2. In Windows Defender security center, click **Device Security** > **Core isolation** > **Memory integrity**. +2. In Windows Defender Security Center, click **Device Security** > **Core isolation** > **Memory integrity**. + +### Enable HVCI using Intune + +Enabling in Intune requires using the Code Integrity node in the [AppLocker CSP](https://docs.microsoft.com/windows/client-management/mdm/applocker-csp). ### Enable HVCI using Group Policy