Update enable-exploit-protection.md

This commit is contained in:
Denise Vangel-MSFT 2021-01-08 09:46:11 -08:00 committed by GitHub
parent 2e7e01b0ae
commit f556d65b44
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -31,13 +31,12 @@ manager: dansimp
Many features from the Enhanced Mitigation Experience Toolkit (EMET) are included in exploit protection. Many features from the Enhanced Mitigation Experience Toolkit (EMET) are included in exploit protection.
You can enable each mitigation separately by using any of these methods: You can enable each mitigation separately by using any of these methods:
- [Windows Security app](#windows-security-app)
* [Windows Security app](#windows-security-app) - [Microsoft Intune](#intune)
* [Microsoft Intune](#intune) - [Mobile Device Management (MDM)](#mdm)
* [Mobile Device Management (MDM)](#mdm) - [Microsoft Endpoint Configuration Manager](#microsoft-endpoint-configuration-manager)
* [Microsoft Endpoint Configuration Manager](#microsoft-endpoint-configuration-manager) - [Group Policy](#group-policy)
* [Group Policy](#group-policy) - [PowerShell](#powershell)
* [PowerShell](#powershell)
Exploit protection is configured by default in Windows 10. You can set each mitigation to on, off, or to its default value. Some mitigations have additional options. Exploit protection is configured by default in Windows 10. You can set each mitigation to on, off, or to its default value. Some mitigations have additional options.
@ -160,11 +159,8 @@ Get-ProcessMitigation -Name processName.exe
> [!IMPORTANT] > [!IMPORTANT]
> System-level mitigations that have not been configured will show a status of `NOTSET`. > System-level mitigations that have not been configured will show a status of `NOTSET`.
> > - For system-level settings, `NOTSET` indicates the default setting for that mitigation has been applied.
> For system-level settings, `NOTSET` indicates the default setting for that mitigation has been applied. > - For app-level settings, `NOTSET` indicates the system-level setting for the mitigation will be applied.
>
> For app-level settings, `NOTSET` indicates the system-level setting for the mitigation will be applied.
>
> The default setting for each system-level mitigation can be seen in the Windows Security. > The default setting for each system-level mitigation can be seen in the Windows Security.
Use `Set` to configure each mitigation in the following format: Use `Set` to configure each mitigation in the following format: