---
title: MSSecurityGuide Policy CSP
description: Learn more about the MSSecurityGuide Area in Policy CSP.
author: vinaypamnani-msft
manager: aaroncz
ms.author: vinpa
ms.date: 02/17/2023
ms.localizationpriority: medium
ms.prod: windows-client
ms.technology: itpro-manage
ms.topic: reference
---

<!-- Auto-Generated CSP Document -->

<!-- MSSecurityGuide-Begin -->
# Policy CSP - MSSecurityGuide

> [!TIP]
> This CSP contains ADMX-backed policies which require a special SyncML format to enable or disable. You must specify the data type in the SyncML as &lt;Format&gt;chr&lt;/Format&gt;. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
>
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it.  For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).

<!-- MSSecurityGuide-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- MSSecurityGuide-Editable-End -->

<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Begin -->
## ApplyUACRestrictionsToLocalAccountsOnNetworkLogon

<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Applicability-End -->

<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-OmaUri-Begin -->
```Device
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/ApplyUACRestrictionsToLocalAccountsOnNetworkLogon
```
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-OmaUri-End -->

<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Description-Begin -->
<!-- Description-Source-Not-Found -->
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Description-End -->

<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Editable-End -->

<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-DFProperties-Begin -->
**Description framework properties**:

| Property name | Property value |
|:--|:--|
| Format | chr (string) |
| Access Type | Add, Delete, Get, Replace |
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-DFProperties-End -->

<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-AdmxBacked-Begin -->
<!-- ADMX-Not-Found -->
> [!TIP]
> This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).

**ADMX mapping**:

| Name | Value |
|:--|:--|
| Name | Pol_SecGuide_0201_LATFP |
| ADMX File Name | SecGuide.admx |
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-AdmxBacked-End -->

<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-Examples-End -->

<!-- ApplyUACRestrictionsToLocalAccountsOnNetworkLogon-End -->

<!-- ConfigureSMBV1ClientDriver-Begin -->
## ConfigureSMBV1ClientDriver

<!-- ConfigureSMBV1ClientDriver-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
<!-- ConfigureSMBV1ClientDriver-Applicability-End -->

<!-- ConfigureSMBV1ClientDriver-OmaUri-Begin -->
```Device
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/ConfigureSMBV1ClientDriver
```
<!-- ConfigureSMBV1ClientDriver-OmaUri-End -->

<!-- ConfigureSMBV1ClientDriver-Description-Begin -->
<!-- Description-Source-Not-Found -->
<!-- ConfigureSMBV1ClientDriver-Description-End -->

<!-- ConfigureSMBV1ClientDriver-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- ConfigureSMBV1ClientDriver-Editable-End -->

<!-- ConfigureSMBV1ClientDriver-DFProperties-Begin -->
**Description framework properties**:

| Property name | Property value |
|:--|:--|
| Format | chr (string) |
| Access Type | Add, Delete, Get, Replace |
<!-- ConfigureSMBV1ClientDriver-DFProperties-End -->

<!-- ConfigureSMBV1ClientDriver-AdmxBacked-Begin -->
<!-- ADMX-Not-Found -->
> [!TIP]
> This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).

**ADMX mapping**:

| Name | Value |
|:--|:--|
| Name | Pol_SecGuide_0002_SMBv1_ClientDriver |
| ADMX File Name | SecGuide.admx |
<!-- ConfigureSMBV1ClientDriver-AdmxBacked-End -->

<!-- ConfigureSMBV1ClientDriver-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- ConfigureSMBV1ClientDriver-Examples-End -->

<!-- ConfigureSMBV1ClientDriver-End -->

<!-- ConfigureSMBV1Server-Begin -->
## ConfigureSMBV1Server

<!-- ConfigureSMBV1Server-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
<!-- ConfigureSMBV1Server-Applicability-End -->

<!-- ConfigureSMBV1Server-OmaUri-Begin -->
```Device
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/ConfigureSMBV1Server
```
<!-- ConfigureSMBV1Server-OmaUri-End -->

<!-- ConfigureSMBV1Server-Description-Begin -->
<!-- Description-Source-Not-Found -->
<!-- ConfigureSMBV1Server-Description-End -->

<!-- ConfigureSMBV1Server-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- ConfigureSMBV1Server-Editable-End -->

<!-- ConfigureSMBV1Server-DFProperties-Begin -->
**Description framework properties**:

| Property name | Property value |
|:--|:--|
| Format | chr (string) |
| Access Type | Add, Delete, Get, Replace |
<!-- ConfigureSMBV1Server-DFProperties-End -->

<!-- ConfigureSMBV1Server-AdmxBacked-Begin -->
<!-- ADMX-Not-Found -->
> [!TIP]
> This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).

**ADMX mapping**:

| Name | Value |
|:--|:--|
| Name | Pol_SecGuide_0001_SMBv1_Server |
| ADMX File Name | SecGuide.admx |
<!-- ConfigureSMBV1Server-AdmxBacked-End -->

<!-- ConfigureSMBV1Server-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- ConfigureSMBV1Server-Examples-End -->

<!-- ConfigureSMBV1Server-End -->

<!-- EnableStructuredExceptionHandlingOverwriteProtection-Begin -->
## EnableStructuredExceptionHandlingOverwriteProtection

<!-- EnableStructuredExceptionHandlingOverwriteProtection-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
<!-- EnableStructuredExceptionHandlingOverwriteProtection-Applicability-End -->

<!-- EnableStructuredExceptionHandlingOverwriteProtection-OmaUri-Begin -->
```Device
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/EnableStructuredExceptionHandlingOverwriteProtection
```
<!-- EnableStructuredExceptionHandlingOverwriteProtection-OmaUri-End -->

<!-- EnableStructuredExceptionHandlingOverwriteProtection-Description-Begin -->
<!-- Description-Source-Not-Found -->
<!-- EnableStructuredExceptionHandlingOverwriteProtection-Description-End -->

<!-- EnableStructuredExceptionHandlingOverwriteProtection-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- EnableStructuredExceptionHandlingOverwriteProtection-Editable-End -->

<!-- EnableStructuredExceptionHandlingOverwriteProtection-DFProperties-Begin -->
**Description framework properties**:

| Property name | Property value |
|:--|:--|
| Format | chr (string) |
| Access Type | Add, Delete, Get, Replace |
<!-- EnableStructuredExceptionHandlingOverwriteProtection-DFProperties-End -->

<!-- EnableStructuredExceptionHandlingOverwriteProtection-AdmxBacked-Begin -->
<!-- ADMX-Not-Found -->
> [!TIP]
> This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).

**ADMX mapping**:

| Name | Value |
|:--|:--|
| Name | Pol_SecGuide_0102_SEHOP |
| ADMX File Name | SecGuide.admx |
<!-- EnableStructuredExceptionHandlingOverwriteProtection-AdmxBacked-End -->

<!-- EnableStructuredExceptionHandlingOverwriteProtection-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- EnableStructuredExceptionHandlingOverwriteProtection-Examples-End -->

<!-- EnableStructuredExceptionHandlingOverwriteProtection-End -->

<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Begin -->
## TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications

<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Applicability-End -->

<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-OmaUri-Begin -->
```Device
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications
```
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-OmaUri-End -->

<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Description-Begin -->
<!-- Description-Source-Not-Found -->
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Description-End -->

<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Editable-End -->

<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-DFProperties-Begin -->
**Description framework properties**:

| Property name | Property value |
|:--|:--|
| Format | chr (string) |
| Access Type | Add, Delete, Get, Replace |
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-DFProperties-End -->

<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-AdmxBacked-Begin -->
<!-- ADMX-Not-Found -->
> [!TIP]
> This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).

**ADMX mapping**:

| Name | Value |
|:--|:--|
| Name | Pol_SecGuide_0101_WDPUA |
| ADMX File Name | SecGuide.admx |
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-AdmxBacked-End -->

<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-Examples-End -->

<!-- TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications-End -->

<!-- WDigestAuthentication-Begin -->
## WDigestAuthentication

<!-- WDigestAuthentication-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
<!-- WDigestAuthentication-Applicability-End -->

<!-- WDigestAuthentication-OmaUri-Begin -->
```Device
./Device/Vendor/MSFT/Policy/Config/MSSecurityGuide/WDigestAuthentication
```
<!-- WDigestAuthentication-OmaUri-End -->

<!-- WDigestAuthentication-Description-Begin -->
<!-- Description-Source-Not-Found -->
<!-- WDigestAuthentication-Description-End -->

<!-- WDigestAuthentication-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- WDigestAuthentication-Editable-End -->

<!-- WDigestAuthentication-DFProperties-Begin -->
**Description framework properties**:

| Property name | Property value |
|:--|:--|
| Format | chr (string) |
| Access Type | Add, Delete, Get, Replace |
<!-- WDigestAuthentication-DFProperties-End -->

<!-- WDigestAuthentication-AdmxBacked-Begin -->
<!-- ADMX-Not-Found -->
> [!TIP]
> This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).

**ADMX mapping**:

| Name | Value |
|:--|:--|
| Name | Pol_SecGuide_0202_WDigestAuthn |
| ADMX File Name | SecGuide.admx |
<!-- WDigestAuthentication-AdmxBacked-End -->

<!-- WDigestAuthentication-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- WDigestAuthentication-Examples-End -->

<!-- WDigestAuthentication-End -->

<!-- MSSecurityGuide-CspMoreInfo-Begin -->
<!-- Add any additional information about this CSP here. Anything outside this section will get overwritten. -->
<!-- MSSecurityGuide-CspMoreInfo-End -->

<!-- MSSecurityGuide-End -->

## Related articles

[Policy configuration service provider](policy-configuration-service-provider.md)