7.7 KiB
title, description, ms.author, ms.topic, ms.prod, ms.technology, author, ms.localizationpriority, ms.date, ms.reviewer, manager
| title | description | ms.author | ms.topic | ms.prod | ms.technology | author | ms.localizationpriority | ms.date | ms.reviewer | manager |
|---|---|---|---|---|---|---|---|---|---|---|
| Policy CSP - MSSecurityGuide | Learn how Policy CSP - MSSecurityGuide, an ADMX-backed policy, requires a special SyncML format to enable or disable. | dansimp | article | m365-security | windows-sec | manikadhiman | medium | 09/27/2019 | dansimp |
Policy CSP - MSSecurityGuide
MSSecurityGuide policies
- MSSecurityGuide/ApplyUACRestrictionsToLocalAccountsOnNetworkLogon
- MSSecurityGuide/ConfigureSMBV1ClientDriver
- MSSecurityGuide/ConfigureSMBV1Server
- MSSecurityGuide/EnableStructuredExceptionHandlingOverwriteProtection
- MSSecurityGuide/TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications
- MSSecurityGuide/WDigestAuthentication
Tip
These are ADMX-backed policies and require a special SyncML format to enable or disable. For details, see Understanding ADMX-backed policies.
You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to Enabling a policy.
The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see CDATA Sections.
MSSecurityGuide/ApplyUACRestrictionsToLocalAccountsOnNetworkLogon
| Edition | Windows 10 | Windows 11 |
|---|---|---|
| Home | No | No |
| Pro | Yes | Yes |
| Business | Yes | Yes |
| Enterprise | Yes | Yes |
| Education | Yes | Yes |
[!div class = "checklist"]
- Device
ADMX Info:
- GP name: Pol_SecGuide_0201_LATFP
- GP ADMX file name: SecGuide.admx
MSSecurityGuide/ConfigureSMBV1ClientDriver
| Edition | Windows 10 | Windows 11 |
|---|---|---|
| Home | No | No |
| Pro | Yes | Yes |
| Business | Yes | Yes |
| Enterprise | Yes | Yes |
| Education | Yes | Yes |
[!div class = "checklist"]
- Device
ADMX Info:
- GP name: Pol_SecGuide_0002_SMBv1_ClientDriver
- GP ADMX file name: SecGuide.admx
MSSecurityGuide/ConfigureSMBV1Server
| Edition | Windows 10 | Windows 11 |
|---|---|---|
| Home | No | No |
| Pro | Yes | Yes |
| Business | Yes | Yes |
| Enterprise | Yes | Yes |
| Education | Yes | Yes |
[!div class = "checklist"]
- Device
ADMX Info:
- GP name: Pol_SecGuide_0001_SMBv1_Server
- GP ADMX file name: SecGuide.admx
MSSecurityGuide/EnableStructuredExceptionHandlingOverwriteProtection
| Edition | Windows 10 | Windows 11 |
|---|---|---|
| Home | No | No |
| Pro | Yes | Yes |
| Business | Yes | Yes |
| Enterprise | Yes | Yes |
| Education | Yes | Yes |
[!div class = "checklist"]
- Device
ADMX Info:
- GP name: Pol_SecGuide_0102_SEHOP
- GP ADMX file name: SecGuide.admx
MSSecurityGuide/TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications
| Edition | Windows 10 | Windows 11 |
|---|---|---|
| Home | No | No |
| Pro | Yes | Yes |
| Business | Yes | Yes |
| Enterprise | Yes | Yes |
| Education | Yes | Yes |
[!div class = "checklist"]
- Device
ADMX Info:
- GP name: Pol_SecGuide_0101_WDPUA
- GP ADMX file name: SecGuide.admx
MSSecurityGuide/WDigestAuthentication
| Edition | Windows 10 | Windows 11 |
|---|---|---|
| Home | No | No |
| Pro | Yes | Yes |
| Business | Yes | Yes |
| Enterprise | Yes | Yes |
| Education | Yes | Yes |
[!div class = "checklist"]
- Device
ADMX Info:
- GP name: Pol_SecGuide_0202_WDigestAuthn
- GP ADMX file name: SecGuide.admx