deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-13 13:57:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

fixed note

Browse Source
This commit is contained in:
Justinha 2017-04-18 16:19:06 -07:00
parent 0b60bafe2c
commit ed55168fe4
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
windows/keep-secure/introducing-managed-installer-for-device-guard.md
View File

@ -24,11 +24,11 @@ Specifying an executable as a managed installer will cause Windows to tag files
Once the IT administrator adds the Allow: Managed Installer option to a configurable CI policy for Device Guard, the configurable CI component will subsequently check for the presence of the origin information when evaluating other application execution control rules specified in the policy. Once the IT administrator adds the Allow: Managed Installer option to a configurable CI policy for Device Guard, the configurable CI component will subsequently check for the presence of the origin information when evaluating other application execution control rules specified in the policy.
If there are no deny rules present for the file, it will be authorized based on the managed installer origin information. If there are no deny rules present for the file, it will be authorized based on the managed installer origin information.
>![NOTE] > ![NOTE]
>Admins needs to ensure that there is a CI policy in place to allow the system to boot and run any other authorized applications that may not be deployed through a managed installer. > Admins needs to ensure that there is a CI policy in place to allow the system to boot and run any other authorized applications that may not be deployed through a managed installer.
> >
>Examples of CI policies available in C:\Windows\schemas\CodeIntegrity\ExamplePolicies help authorize Windows OS components, WHQL signed drivers and all Store apps. > Examples of CI policies available in C:\Windows\schemas\CodeIntegrity\ExamplePolicies help authorize Windows OS components, WHQL signed drivers and all Store apps.
>Admins can reference and customize them as needed for their Device Guard deployment. > Admins can reference and customize them as needed for their Device Guard deployment.
## Configuring a managed installer with AppLocker and configurable code integrity policy ## Configuring a managed installer with AppLocker and configurable code integrity policy