---
title: MSSecurityGuide Policy CSP
description: Learn more about the MSSecurityGuide Area in Policy CSP.
ms.date: 01/31/2024
---

<!-- Auto-Generated CSP Document -->

<!-- MSSecurityGuide-Begin -->
# Policy CSP - MSSecurityGuide

[!INCLUDE [ADMX-backed CSP tip](includes/mdm-admx-csp-note.md)]

[!INCLUDE [Windows Insider tip](includes/mdm-insider-csp-note.md)]

<!-- MSSecurityGuide-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- MSSecurityGuide-Editable-End -->

<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Begin -->
## ApplyUACRestrictionsToLocalAccountsOnNetworkLogon

<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1803 [10.0.17134] and later |
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Applicability-End -->

<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-OmaUri-Begin -->
```Device
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/ApplyUACRestrictionsToLocalAccountsOnNetworkLogon
```
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-OmaUri-End -->

<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Description-Begin -->
<!-- Description-Source-Not-Found -->
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Description-End -->

<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Editable-End -->

<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-DFProperties-Begin -->
**Description framework properties**:

| Property name | Property value |
|:--|:--|
| Format | `chr` (string) |
| Access Type | Add, Delete, Get, Replace |
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-DFProperties-End -->

<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-AdmxBacked-Begin -->
<!-- ADMX-Not-Found -->
[!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]

**ADMX mapping**:

| Name | Value |
|:--|:--|
| Name | Pol_SecGuide_0201_LATFP |
| ADMX File Name | SecGuide.admx |
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-AdmxBacked-End -->

<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Examples-End -->

<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-End -->

<!-- ConfigureSMBV1ClientDriver-Begin -->
## ConfigureSMBV1ClientDriver

<!-- ConfigureSMBV1ClientDriver-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1803 [10.0.17134] and later |
<!-- ConfigureSMBV1ClientDriver-Applicability-End -->

<!-- ConfigureSMBV1ClientDriver-OmaUri-Begin -->
```Device
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/ConfigureSMBV1ClientDriver
```
<!-- ConfigureSMBV1ClientDriver-OmaUri-End -->

<!-- ConfigureSMBV1ClientDriver-Description-Begin -->
<!-- Description-Source-Not-Found -->
<!-- ConfigureSMBV1ClientDriver-Description-End -->

<!-- ConfigureSMBV1ClientDriver-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- ConfigureSMBV1ClientDriver-Editable-End -->

<!-- ConfigureSMBV1ClientDriver-DFProperties-Begin -->
**Description framework properties**:

| Property name | Property value |
|:--|:--|
| Format | `chr` (string) |
| Access Type | Add, Delete, Get, Replace |
<!-- ConfigureSMBV1ClientDriver-DFProperties-End -->

<!-- ConfigureSMBV1ClientDriver-AdmxBacked-Begin -->
<!-- ADMX-Not-Found -->
[!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]

**ADMX mapping**:

| Name | Value |
|:--|:--|
| Name | Pol_SecGuide_0002_SMBv1_ClientDriver |
| ADMX File Name | SecGuide.admx |
<!-- ConfigureSMBV1ClientDriver-AdmxBacked-End -->

<!-- ConfigureSMBV1ClientDriver-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- ConfigureSMBV1ClientDriver-Examples-End -->

<!-- ConfigureSMBV1ClientDriver-End -->

<!-- ConfigureSMBV1Server-Begin -->
## ConfigureSMBV1Server

<!-- ConfigureSMBV1Server-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1803 [10.0.17134] and later |
<!-- ConfigureSMBV1Server-Applicability-End -->

<!-- ConfigureSMBV1Server-OmaUri-Begin -->
```Device
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/ConfigureSMBV1Server
```
<!-- ConfigureSMBV1Server-OmaUri-End -->

<!-- ConfigureSMBV1Server-Description-Begin -->
<!-- Description-Source-Not-Found -->
<!-- ConfigureSMBV1Server-Description-End -->

<!-- ConfigureSMBV1Server-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- ConfigureSMBV1Server-Editable-End -->

<!-- ConfigureSMBV1Server-DFProperties-Begin -->
**Description framework properties**:

| Property name | Property value |
|:--|:--|
| Format | `chr` (string) |
| Access Type | Add, Delete, Get, Replace |
<!-- ConfigureSMBV1Server-DFProperties-End -->

<!-- ConfigureSMBV1Server-AdmxBacked-Begin -->
<!-- ADMX-Not-Found -->
[!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]

**ADMX mapping**:

| Name | Value |
|:--|:--|
| Name | Pol_SecGuide_0001_SMBv1_Server |
| ADMX File Name | SecGuide.admx |
<!-- ConfigureSMBV1Server-AdmxBacked-End -->

<!-- ConfigureSMBV1Server-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- ConfigureSMBV1Server-Examples-End -->

<!-- ConfigureSMBV1Server-End -->

<!-- EnableStructuredExceptionHandlingOverwriteProtection-Begin -->
## EnableStructuredExceptionHandlingOverwriteProtection

<!-- EnableStructuredExceptionHandlingOverwriteProtection-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1803 [10.0.17134] and later |
<!-- EnableStructuredExceptionHandlingOverwriteProtection-Applicability-End -->

<!-- EnableStructuredExceptionHandlingOverwriteProtection-OmaUri-Begin -->
```Device
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/EnableStructuredExceptionHandlingOverwriteProtection
```
<!-- EnableStructuredExceptionHandlingOverwriteProtection-OmaUri-End -->

<!-- EnableStructuredExceptionHandlingOverwriteProtection-Description-Begin -->
<!-- Description-Source-Not-Found -->
<!-- EnableStructuredExceptionHandlingOverwriteProtection-Description-End -->

<!-- EnableStructuredExceptionHandlingOverwriteProtection-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- EnableStructuredExceptionHandlingOverwriteProtection-Editable-End -->

<!-- EnableStructuredExceptionHandlingOverwriteProtection-DFProperties-Begin -->
**Description framework properties**:

| Property name | Property value |
|:--|:--|
| Format | `chr` (string) |
| Access Type | Add, Delete, Get, Replace |
<!-- EnableStructuredExceptionHandlingOverwriteProtection-DFProperties-End -->

<!-- EnableStructuredExceptionHandlingOverwriteProtection-AdmxBacked-Begin -->
<!-- ADMX-Not-Found -->
[!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]

**ADMX mapping**:

| Name | Value |
|:--|:--|
| Name | Pol_SecGuide_0102_SEHOP |
| ADMX File Name | SecGuide.admx |
<!-- EnableStructuredExceptionHandlingOverwriteProtection-AdmxBacked-End -->

<!-- EnableStructuredExceptionHandlingOverwriteProtection-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- EnableStructuredExceptionHandlingOverwriteProtection-Examples-End -->

<!-- EnableStructuredExceptionHandlingOverwriteProtection-End -->

<!-- NetBTNodeTypeConfiguration-Begin -->
## NetBTNodeTypeConfiguration

<!-- NetBTNodeTypeConfiguration-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows Insider Preview |
<!-- NetBTNodeTypeConfiguration-Applicability-End -->

<!-- NetBTNodeTypeConfiguration-OmaUri-Begin -->
```Device
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/NetBTNodeTypeConfiguration
```
<!-- NetBTNodeTypeConfiguration-OmaUri-End -->

<!-- NetBTNodeTypeConfiguration-Description-Begin -->
<!-- Description-Source-Not-Found -->
<!-- NetBTNodeTypeConfiguration-Description-End -->

<!-- NetBTNodeTypeConfiguration-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- NetBTNodeTypeConfiguration-Editable-End -->

<!-- NetBTNodeTypeConfiguration-DFProperties-Begin -->
**Description framework properties**:

| Property name | Property value |
|:--|:--|
| Format | `chr` (string) |
| Access Type | Add, Delete, Get, Replace |
<!-- NetBTNodeTypeConfiguration-DFProperties-End -->

<!-- NetBTNodeTypeConfiguration-AdmxBacked-Begin -->
<!-- ADMX-Not-Found -->
[!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]

**ADMX mapping**:

| Name | Value |
|:--|:--|
| Name | Pol_SecGuide_0050_NetbtNodeTypeConfig |
| ADMX File Name | SecGuide.admx |
<!-- NetBTNodeTypeConfiguration-AdmxBacked-End -->

<!-- NetBTNodeTypeConfiguration-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- NetBTNodeTypeConfiguration-Examples-End -->

<!-- NetBTNodeTypeConfiguration-End -->

<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Begin -->
## TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications

<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1803 [10.0.17134] and later |
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Applicability-End -->

<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-OmaUri-Begin -->
```Device
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications
```
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-OmaUri-End -->

<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Description-Begin -->
<!-- Description-Source-Not-Found -->
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Description-End -->

<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Editable-End -->

<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-DFProperties-Begin -->
**Description framework properties**:

| Property name | Property value |
|:--|:--|
| Format | `chr` (string) |
| Access Type | Add, Delete, Get, Replace |
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-DFProperties-End -->

<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-AdmxBacked-Begin -->
<!-- ADMX-Not-Found -->
[!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]

**ADMX mapping**:

| Name | Value |
|:--|:--|
| Name | Pol_SecGuide_0101_WDPUA |
| ADMX File Name | SecGuide.admx |
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-AdmxBacked-End -->

<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Examples-End -->

<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-End -->

<!-- WDigestAuthentication-Begin -->
## WDigestAuthentication

<!-- WDigestAuthentication-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| ✅ Device <br> ❌ User | ✅ Pro <br> ✅ Enterprise <br> ✅ Education <br> ✅ Windows SE <br> ✅ IoT Enterprise / IoT Enterprise LTSC | ✅ Windows 10, version 1803 [10.0.17134] and later |
<!-- WDigestAuthentication-Applicability-End -->

<!-- WDigestAuthentication-OmaUri-Begin -->
```Device
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/WDigestAuthentication
```
<!-- WDigestAuthentication-OmaUri-End -->

<!-- WDigestAuthentication-Description-Begin -->
<!-- Description-Source-Not-Found -->
<!-- WDigestAuthentication-Description-End -->

<!-- WDigestAuthentication-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- WDigestAuthentication-Editable-End -->

<!-- WDigestAuthentication-DFProperties-Begin -->
**Description framework properties**:

| Property name | Property value |
|:--|:--|
| Format | `chr` (string) |
| Access Type | Add, Delete, Get, Replace |
<!-- WDigestAuthentication-DFProperties-End -->

<!-- WDigestAuthentication-AdmxBacked-Begin -->
<!-- ADMX-Not-Found -->
[!INCLUDE [ADMX-backed policy note](includes/mdm-admx-policy-note.md)]

**ADMX mapping**:

| Name | Value |
|:--|:--|
| Name | Pol_SecGuide_0202_WDigestAuthn |
| ADMX File Name | SecGuide.admx |
<!-- WDigestAuthentication-AdmxBacked-End -->

<!-- WDigestAuthentication-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- WDigestAuthentication-Examples-End -->

<!-- WDigestAuthentication-End -->

<!-- MSSecurityGuide-CspMoreInfo-Begin -->
<!-- Add any additional information about this CSP here. Anything outside this section will get overwritten. -->
<!-- MSSecurityGuide-CspMoreInfo-End -->

<!-- MSSecurityGuide-End -->

## Related articles

[Policy configuration service provider](policy-configuration-service-provider.md)