--- title: DeviceStatus CSP description: Learn more about the DeviceStatus CSP. ms.date: 08/06/2024 --- # DeviceStatus CSP The following list shows the DeviceStatus configuration service provider nodes: - ./Vendor/MSFT/DeviceStatus - [Antispyware](#antispyware) - [SignatureStatus](#antispywaresignaturestatus) - [Status](#antispywarestatus) - [Antivirus](#antivirus) - [SignatureStatus](#antivirussignaturestatus) - [Status](#antivirusstatus) - [Battery](#battery) - [EstimatedChargeRemaining](#batteryestimatedchargeremaining) - [EstimatedRuntime](#batteryestimatedruntime) - [Status](#batterystatus) - [CellularIdentities](#cellularidentities) - [{IMEI}](#cellularidentitiesimei) - [CommercializationOperator](#cellularidentitiesimeicommercializationoperator) - [ICCID](#cellularidentitiesimeiiccid) - [IMSI](#cellularidentitiesimeiimsi) - [PhoneNumber](#cellularidentitiesimeiphonenumber) - [RoamingCompliance](#cellularidentitiesimeiroamingcompliance) - [RoamingStatus](#cellularidentitiesimeiroamingstatus) - [CertAttestation](#certattestation) - [MDMClientCertAttestation](#certattestationmdmclientcertattestation) - [Compliance](#compliance) - [EncryptionCompliance](#complianceencryptioncompliance) - [DeviceGuard](#deviceguard) - [HypervisorEnforcedCodeIntegrityStatus](#deviceguardhypervisorenforcedcodeintegritystatus) - [LsaCfgCredGuardStatus](#deviceguardlsacfgcredguardstatus) - [SystemGuardStatus](#deviceguardsystemguardstatus) - [VirtualizationBasedSecurityHwReq](#deviceguardvirtualizationbasedsecurityhwreq) - [VirtualizationBasedSecurityStatus](#deviceguardvirtualizationbasedsecuritystatus) - [DMA](#dma) - [BootDMAProtectionStatus](#dmabootdmaprotectionstatus) - [DomainName](#domainname) - [Firewall](#firewall) - [Status](#firewallstatus) - [NetworkIdentifiers](#networkidentifiers) - [{MacAddress}](#networkidentifiersmacaddress) - [IPAddressV4](#networkidentifiersmacaddressipaddressv4) - [IPAddressV6](#networkidentifiersmacaddressipaddressv6) - [IsConnected](#networkidentifiersmacaddressisconnected) - [Type](#networkidentifiersmacaddresstype) - [OS](#os) - [Edition](#osedition) - [Mode](#osmode) - [SecureBootState](#securebootstate) - [TPM](#tpm) - [ManufacturerId](#tpmmanufacturerid) - [ManufacturerIdTxt](#tpmmanufactureridtxt) - [ManufacturerVersion](#tpmmanufacturerversion) - [SpecificationVersion](#tpmspecificationversion) - [UAC](#uac) - [Status](#uacstatus) ## Antispyware | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1703 [10.0.15063] and later | ```Device ./Vendor/MSFT/DeviceStatus/Antispyware ``` Node for the antispyware query. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `node` | | Access Type | Get | ### Antispyware/SignatureStatus | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1703 [10.0.15063] and later | ```Device ./Vendor/MSFT/DeviceStatus/Antispyware/SignatureStatus ``` Integer that specifies the status of the antispyware signature. Valid values: 0 - The security software reports that it isn't the most recent version. 1 - The security software reports that it's the most recent version. 2 - Not applicable. This is returned for devices like the phone that don't have an antivirus (where the API doesn't exist). If more than one antispyware provider is active, this node returns: 1 - If every active antispyware provider has a valid signature status. 0 - If any of the active antispyware providers has an invalid signature status. This node also returns 0 when no anti-spyware provider is active. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `int` | | Access Type | Get | | Default Value | 1 | ### Antispyware/Status | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1703 [10.0.15063] and later | ```Device ./Vendor/MSFT/DeviceStatus/Antispyware/Status ``` Integer that specifies the status of the antispyware. Valid values: 0 - The status of the security provider category is good and doesn't need user attention. 1 - The status of the security provider category isn't monitored by Windows Security Center (WSC). 2 - The status of the security provider category is poor and the computer may be at risk. 3 - The security provider category is in snooze state. Snooze indicates that WSC isn't actively protecting the computer. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `int` | | Access Type | Get | | Default Value | 3 | ## Antivirus | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1703 [10.0.15063] and later | ```Device ./Vendor/MSFT/DeviceStatus/Antivirus ``` Node for the antivirus query. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `node` | | Access Type | Get | ### Antivirus/SignatureStatus | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1703 [10.0.15063] and later | ```Device ./Vendor/MSFT/DeviceStatus/Antivirus/SignatureStatus ``` Integer that specifies the status of the antivirus signature. Valid values: 0 - The security software reports that it isn't the most recent version. 1 (default) - The security software reports that it's the most recent version. 2 - Not applicable. This is returned for devices like the phone that don't have an antivirus (where the API doesn't exist). If more than one antivirus provider is active, this node returns: 1 - If every active antivirus provider has a valid signature status. 0 - If any of the active antivirus providers has an invalid signature status. This node also returns 0 when no antivirus provider is active. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `int` | | Access Type | Get | | Default Value | 1 | ### Antivirus/Status | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1703 [10.0.15063] and later | ```Device ./Vendor/MSFT/DeviceStatus/Antivirus/Status ``` Integer that specifies the status of the antivirus. Valid values: 0 - Antivirus is on and monitoring, 1 - Antivirus is disabled, 2 - Antivirus isn't monitoring the device/PC or some options have been turned off, 3 (default) - Antivirus is temporarily not completely monitoring the device/PC, 4 - Antivirus not applicable for this device. This is returned for devices like the phone that don't have an antivirus (where the API doesn't exist). **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `int` | | Access Type | Get | | Default Value | 3 | ## Battery | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1703 [10.0.15063] and later | ```Device ./Vendor/MSFT/DeviceStatus/Battery ``` Node for the battery query. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `node` | | Access Type | Get | ### Battery/EstimatedChargeRemaining | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1703 [10.0.15063] and later | ```Device ./Vendor/MSFT/DeviceStatus/Battery/EstimatedChargeRemaining ``` Integer that specifies the estimated battery charge remaining. This is the value returned in BatteryLifeTime in SYSTEM_POWER_STATUS structure. The value is the number of seconds of battery life remaining when the device isn't connected to an AC power source. When it's connected to a power source, the value is -1. When the estimation is unknown, the value is -1. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `int` | | Access Type | Get | | Default Value | 0 | ### Battery/EstimatedRuntime | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1703 [10.0.15063] and later | ```Device ./Vendor/MSFT/DeviceStatus/Battery/EstimatedRuntime ``` Integer that specifies the estimated runtime of the battery. This is the value returned in BatteryLifeTime in SYSTEM_POWER_STATUS structure. The value is the number of seconds of battery life remaining when the device isn't connected to an AC power source. When it's connected to a power source, the value is -1. When the estimation is unknown, the value is -1. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `int` | | Access Type | Get | | Default Value | 0 | ### Battery/Status | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1703 [10.0.15063] and later | ```Device ./Vendor/MSFT/DeviceStatus/Battery/Status ``` Integer that specifies the status of the battery. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `int` | | Access Type | Get | | Default Value | 0 | ## CellularIdentities | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1511 [10.0.10586] and later | ```Device ./Vendor/MSFT/DeviceStatus/CellularIdentities ``` Node for queries on the SIM cards. > [!NOTE] > Multiple SIMs are supported. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `node` | | Access Type | Get | ### CellularIdentities/{IMEI} | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1511 [10.0.10586] and later | ```Device ./Vendor/MSFT/DeviceStatus/CellularIdentities/{IMEI} ``` The unique International Mobile Station Equipment Identity (IMEI) number of the mobile device. An IMEI is present for each SIM card on the device. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `node` | | Access Type | Get | | Dynamic Node Naming | ClientInventory | #### CellularIdentities/{IMEI}/CommercializationOperator | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1511 [10.0.10586] and later | ```Device ./Vendor/MSFT/DeviceStatus/CellularIdentities/{IMEI}/CommercializationOperator ``` The mobile service provider or mobile operator associated with the specific IMEI number. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `chr` (string) | | Access Type | Get | #### CellularIdentities/{IMEI}/ICCID | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1511 [10.0.10586] and later | ```Device ./Vendor/MSFT/DeviceStatus/CellularIdentities/{IMEI}/ICCID ``` The Integrated Circuit Card ID (ICCID) of the SIM card associated with the specific IMEI number. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `chr` (string) | | Access Type | Get | #### CellularIdentities/{IMEI}/IMSI | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1511 [10.0.10586] and later | ```Device ./Vendor/MSFT/DeviceStatus/CellularIdentities/{IMEI}/IMSI ``` The International Mobile Subscriber Identity (IMSI) associated with the IMEI number. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `chr` (string) | | Access Type | Get | #### CellularIdentities/{IMEI}/PhoneNumber | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1511 [10.0.10586] and later | ```Device ./Vendor/MSFT/DeviceStatus/CellularIdentities/{IMEI}/PhoneNumber ``` Phone number associated with the specific IMEI number. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `chr` (string) | | Access Type | Get | #### CellularIdentities/{IMEI}/RoamingCompliance | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1511 [10.0.10586] and later | ```Device ./Vendor/MSFT/DeviceStatus/CellularIdentities/{IMEI}/RoamingCompliance ``` Boolean value that indicates compliance with the enforced enterprise roaming policy. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `bool` | | Access Type | Get | #### CellularIdentities/{IMEI}/RoamingStatus | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1511 [10.0.10586] and later | ```Device ./Vendor/MSFT/DeviceStatus/CellularIdentities/{IMEI}/RoamingStatus ``` Indicates whether the SIM card associated with the specific IMEI number is roaming. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `bool` | | Access Type | Get | ## CertAttestation | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 21H2 with [KB5018483](https://support.microsoft.com/help/5018483) [10.0.22000.1165] and later
✅ Windows 11, version 22H2 [10.0.22621] and later | ```Device ./Vendor/MSFT/DeviceStatus/CertAttestation ``` Node for Certificate Attestation. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `node` | | Access Type | Get | ### CertAttestation/MDMClientCertAttestation | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 21H2 with [KB5018483](https://support.microsoft.com/help/5018483) [10.0.22000.1165] and later
✅ Windows 11, version 22H2 [10.0.22621] and later | ```Device ./Vendor/MSFT/DeviceStatus/CertAttestation/MDMClientCertAttestation ``` MDM Certificate attestation information. This will return an XML blob containing the relevant attestation fields. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `chr` (string) | | Access Type | Get | ## Compliance | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1511 [10.0.10586] and later | ```Device ./Vendor/MSFT/DeviceStatus/Compliance ``` Node for the compliance query. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `node` | | Access Type | Get | ### Compliance/EncryptionCompliance | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1511 [10.0.10586] and later | ```Device ./Vendor/MSFT/DeviceStatus/Compliance/EncryptionCompliance ``` Boolean value that indicates compliance with the enterprise encryption policy for OS (system) drives. The value is one of the following: 0 - not encrypted, 1 - encrypted. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `bool` | | Access Type | Get | ## DeviceGuard | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1803 [10.0.17134] and later | ```Device ./Vendor/MSFT/DeviceStatus/DeviceGuard ``` Node for Device Guard query. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `node` | | Access Type | Get | ### DeviceGuard/HypervisorEnforcedCodeIntegrityStatus | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 21H2 [10.0.22000] and later | ```Device ./Vendor/MSFT/DeviceStatus/DeviceGuard/HypervisorEnforcedCodeIntegrityStatus ``` Hypervisor Enforced Code Integrity (HVCI) status. 0 - Running, 1 - Reboot required, 2 - Not configured, 3 - VBS not running. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `int` | | Access Type | Get | ### DeviceGuard/LsaCfgCredGuardStatus | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1803 [10.0.17134] and later | ```Device ./Vendor/MSFT/DeviceStatus/DeviceGuard/LsaCfgCredGuardStatus ``` Local System Authority (LSA) credential guard status. 0 - Running, 1 - Reboot required, 2 - Not licensed for Credential Guard, 3 - Not configured, 4 - VBS not running. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `int` | | Access Type | Get | ### DeviceGuard/SystemGuardStatus | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 21H2 [10.0.22000] and later | ```Device ./Vendor/MSFT/DeviceStatus/DeviceGuard/SystemGuardStatus ``` System Guard status. 0 - Running, 1 - Reboot required, 2 - Not configured, 3 - System doesn't meet hardware requirements. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `int` | | Access Type | Get | ### DeviceGuard/VirtualizationBasedSecurityHwReq | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1803 [10.0.17134] and later | ```Device ./Vendor/MSFT/DeviceStatus/DeviceGuard/VirtualizationBasedSecurityHwReq ``` Virtualization-based security hardware requirement status. The value is a 256 value bitmask. 0x0: System meets hardware configuration requirements, 0x1: SecureBoot required, 0x2: DMA Protection required, 0x4: HyperV not supported for Guest VM, 0x8: HyperV feature isn't available. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `int` | | Access Type | Get | ### DeviceGuard/VirtualizationBasedSecurityStatus | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1803 [10.0.17134] and later | ```Device ./Vendor/MSFT/DeviceStatus/DeviceGuard/VirtualizationBasedSecurityStatus ``` Virtualization-based security status. Value is one of the following: 0 - Running, 1 - Reboot required, 2 - 64 bit architecture required, 3 - not licensed, 4 - not configured, 5 - System doesn't meet hardware requirements, 42 - Other. Event logs in Microsoft-Windows-DeviceGuard have more details. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `int` | | Access Type | Get | ## DMA | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 21H2 [10.0.22000] and later | ```Device ./Vendor/MSFT/DeviceStatus/DMA ``` Node for DMA query. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `node` | | Access Type | Get | ### DMA/BootDMAProtectionStatus | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 11, version 21H2 [10.0.22000] and later | ```Device ./Vendor/MSFT/DeviceStatus/DMA/BootDMAProtectionStatus ``` Boot DMA Protection status. 1 - Enabled, 2 - Disabled. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `int` | | Access Type | Get | ## DomainName | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1803 [10.0.17134] and later | ```Device ./Vendor/MSFT/DeviceStatus/DomainName ``` Returns the fully qualified domain name of the device(if any). **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `chr` (string) | | Access Type | Get | ## Firewall | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1703 [10.0.15063] and later | ```Device ./Vendor/MSFT/DeviceStatus/Firewall ``` Node for the firewall query. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `node` | | Access Type | Get | ### Firewall/Status | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1703 [10.0.15063] and later | ```Device ./Vendor/MSFT/DeviceStatus/Firewall/Status ``` Integer that specifies the status of the firewall. Valid values: 0 - Firewall is on and monitoring, 1 - Firewall has been disabled, 2 - Firewall isn't monitoring all networks or some rules have been turned off, 3 (default) - Firewall is temporarily not monitoring all networks, 4 - Not applicable. This is returned for devices like the phone that don't have an antivirus (where the API doesn't exist). **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `int` | | Access Type | Get | | Default Value | 3 | ## NetworkIdentifiers | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1511 [10.0.10586] and later | ```Device ./Vendor/MSFT/DeviceStatus/NetworkIdentifiers ``` Node for queries on network and device properties. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `node` | | Access Type | Get | ### NetworkIdentifiers/{MacAddress} | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1511 [10.0.10586] and later | ```Device ./Vendor/MSFT/DeviceStatus/NetworkIdentifiers/{MacAddress} ``` MAC address of the wireless network card. A MAC address is present for each network card on the device. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `node` | | Access Type | Get | | Dynamic Node Naming | ClientInventory | #### NetworkIdentifiers/{MacAddress}/IPAddressV4 | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1511 [10.0.10586] and later | ```Device ./Vendor/MSFT/DeviceStatus/NetworkIdentifiers/{MacAddress}/IPAddressV4 ``` IPv4 address of the network card associated with the MAC address. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `chr` (string) | | Access Type | Get | #### NetworkIdentifiers/{MacAddress}/IPAddressV6 | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1511 [10.0.10586] and later | ```Device ./Vendor/MSFT/DeviceStatus/NetworkIdentifiers/{MacAddress}/IPAddressV6 ``` IPv6 address of the network card associated with the MAC address. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `chr` (string) | | Access Type | Get | #### NetworkIdentifiers/{MacAddress}/IsConnected | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1511 [10.0.10586] and later | ```Device ./Vendor/MSFT/DeviceStatus/NetworkIdentifiers/{MacAddress}/IsConnected ``` Boolean value that indicates whether the network card associated with the MAC address has an active network connection. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `bool` | | Access Type | Get | #### NetworkIdentifiers/{MacAddress}/Type | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1511 [10.0.10586] and later | ```Device ./Vendor/MSFT/DeviceStatus/NetworkIdentifiers/{MacAddress}/Type ``` Type of network connection. The value is one of the following: 2 - WLAN (or other Wireless interface), 1 - LAN (or other Wired interface), 0 - Unknown. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `int` | | Access Type | Get | ## OS | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1703 [10.0.15063] and later | ```Device ./Vendor/MSFT/DeviceStatus/OS ``` Node for the OS query. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `node` | | Access Type | Get | ### OS/Edition | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1703 [10.0.15063] and later | ```Device ./Vendor/MSFT/DeviceStatus/OS/Edition ``` String that specifies the OS edition. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `chr` (string) | | Access Type | Get | | Default Value | Not available | ### OS/Mode | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1803 [10.0.17134] and later | ```Device ./Vendor/MSFT/DeviceStatus/OS/Mode ``` Read only node that specifies the device mode. Valid values: 0 - the device is in standard configuration, 1 - the device is in S mode configuration. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `int` | | Access Type | Get | | Default Value | Not available | ## SecureBootState | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1511 [10.0.10586] and later | ```Device ./Vendor/MSFT/DeviceStatus/SecureBootState ``` Indicates whether secure boot is enabled. The value is one of the following: 0 - Not supported, 1 - Enabled, 2 - Disabled. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `int` | | Access Type | Get | ## TPM | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1703 [10.0.15063] and later | ```Device ./Vendor/MSFT/DeviceStatus/TPM ``` Node for the TPM query. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `node` | | Access Type | Get | ### TPM/ManufacturerId | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 2004 with [KB5007253](https://support.microsoft.com/help/5007253) [10.0.19041.1387] and later
✅ Windows 10, version 20H2 with [KB5007253](https://support.microsoft.com/help/5007253) [10.0.19042.1387] and later
✅ Windows 10, version 21H1 with [KB5007253](https://support.microsoft.com/help/5007253) [10.0.19043.1387] and later
✅ Windows 10, version 21H2 with [KB5007253](https://support.microsoft.com/help/5007253) [10.0.19044.1387] and later
✅ Windows 11, version 21H2 [10.0.22000] and later | ```Device ./Vendor/MSFT/DeviceStatus/TPM/ManufacturerId ``` String that specifies the TPM manufacturer ID as a number. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `chr` (string) | | Access Type | Get | | Default Value | Not available | ### TPM/ManufacturerIdTxt | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 2004 with [KB5007253](https://support.microsoft.com/help/5007253) [10.0.19041.1387] and later
✅ Windows 10, version 20H2 with [KB5007253](https://support.microsoft.com/help/5007253) [10.0.19042.1387] and later
✅ Windows 10, version 21H1 with [KB5007253](https://support.microsoft.com/help/5007253) [10.0.19043.1387] and later
✅ Windows 10, version 21H2 with [KB5007253](https://support.microsoft.com/help/5007253) [10.0.19044.1387] and later
✅ Windows 11, version 21H2 [10.0.22000] and later | ```Device ./Vendor/MSFT/DeviceStatus/TPM/ManufacturerIdTxt ``` String that specifies the TPM manufacturer ID as text. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `chr` (string) | | Access Type | Get | | Default Value | Not available | ### TPM/ManufacturerVersion | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 2004 with [KB5007253](https://support.microsoft.com/help/5007253) [10.0.19041.1387] and later
✅ Windows 10, version 20H2 with [KB5007253](https://support.microsoft.com/help/5007253) [10.0.19042.1387] and later
✅ Windows 10, version 21H1 with [KB5007253](https://support.microsoft.com/help/5007253) [10.0.19043.1387] and later
✅ Windows 10, version 21H2 with [KB5007253](https://support.microsoft.com/help/5007253) [10.0.19044.1387] and later
✅ Windows 11, version 21H2 [10.0.22000] and later | ```Device ./Vendor/MSFT/DeviceStatus/TPM/ManufacturerVersion ``` String that specifies the manufacturer version. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `chr` (string) | | Access Type | Get | | Default Value | Not available | ### TPM/SpecificationVersion | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1703 [10.0.15063] and later | ```Device ./Vendor/MSFT/DeviceStatus/TPM/SpecificationVersion ``` String that specifies the specification version. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `chr` (string) | | Access Type | Get | | Default Value | Not available | ## UAC | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1703 [10.0.15063] and later | ```Device ./Vendor/MSFT/DeviceStatus/UAC ``` Node for the UAC query. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `node` | | Access Type | Get | ### UAC/Status | Scope | Editions | Applicable OS | |:--|:--|:--| | ✅ Device
❌ User | ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1703 [10.0.15063] and later | ```Device ./Vendor/MSFT/DeviceStatus/UAC/Status ``` Integer that specifies the status of the UAC. **Description framework properties**: | Property name | Property value | |:--|:--| | Format | `int` | | Access Type | Get | ## Related articles [Configuration service provider reference](configuration-service-provider-reference.md)