mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-13 09:33:20 +00:00
245 lines
11 KiB
Markdown
245 lines
11 KiB
Markdown
---
|
|
title: MSSLegacy Policy CSP
|
|
description: Learn more about the MSSLegacy Area in Policy CSP.
|
|
author: vinaypamnani-msft
|
|
manager: aaroncz
|
|
ms.author: vinpa
|
|
ms.date: 01/09/2023
|
|
ms.localizationpriority: medium
|
|
ms.prod: windows-client
|
|
ms.technology: itpro-manage
|
|
ms.topic: reference
|
|
---
|
|
|
|
<!-- Auto-Generated CSP Document -->
|
|
|
|
<!-- MSSLegacy-Begin -->
|
|
# Policy CSP - MSSLegacy
|
|
|
|
> [!TIP]
|
|
> This CSP contains ADMX-backed policies which require a special SyncML format to enable or disable. You must specify the data type in the SyncML as <Format>chr</Format>. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
|
|
>
|
|
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
|
|
|
|
<!-- MSSLegacy-Editable-Begin -->
|
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
|
<!-- MSSLegacy-Editable-End -->
|
|
|
|
<!-- AllowICMPRedirectsToOverrideOSPFGeneratedRoutes-Begin -->
|
|
## AllowICMPRedirectsToOverrideOSPFGeneratedRoutes
|
|
|
|
<!-- AllowICMPRedirectsToOverrideOSPFGeneratedRoutes-Applicability-Begin -->
|
|
| Scope | Editions | Applicable OS |
|
|
|:--|:--|:--|
|
|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
|
|
<!-- AllowICMPRedirectsToOverrideOSPFGeneratedRoutes-Applicability-End -->
|
|
|
|
<!-- AllowICMPRedirectsToOverrideOSPFGeneratedRoutes-OmaUri-Begin -->
|
|
```Device
|
|
./Device/Vendor/MSFT/Policy/Config/MSSLegacy/AllowICMPRedirectsToOverrideOSPFGeneratedRoutes
|
|
```
|
|
<!-- AllowICMPRedirectsToOverrideOSPFGeneratedRoutes-OmaUri-End -->
|
|
|
|
<!-- AllowICMPRedirectsToOverrideOSPFGeneratedRoutes-Description-Begin -->
|
|
<!-- Description-Source-Not-Found -->
|
|
<!-- AllowICMPRedirectsToOverrideOSPFGeneratedRoutes-Description-End -->
|
|
|
|
<!-- AllowICMPRedirectsToOverrideOSPFGeneratedRoutes-Editable-Begin -->
|
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
|
Allow ICMP redirects to override OSPF generated routes.
|
|
<!-- AllowICMPRedirectsToOverrideOSPFGeneratedRoutes-Editable-End -->
|
|
|
|
<!-- AllowICMPRedirectsToOverrideOSPFGeneratedRoutes-DFProperties-Begin -->
|
|
**Description framework properties**:
|
|
|
|
| Property name | Property value |
|
|
|:--|:--|
|
|
| Format | chr (string) |
|
|
| Access Type | Add, Delete, Get, Replace |
|
|
<!-- AllowICMPRedirectsToOverrideOSPFGeneratedRoutes-DFProperties-End -->
|
|
|
|
<!-- AllowICMPRedirectsToOverrideOSPFGeneratedRoutes-AdmxBacked-Begin -->
|
|
<!-- ADMX-Not-Found -->
|
|
> [!TIP]
|
|
> This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
|
|
|
**ADMX mapping**:
|
|
|
|
| Name | Value |
|
|
|:--|:--|
|
|
| Name | Pol_MSS_EnableICMPRedirect |
|
|
| ADMX File Name | mss-legacy.admx |
|
|
<!-- AllowICMPRedirectsToOverrideOSPFGeneratedRoutes-AdmxBacked-End -->
|
|
|
|
<!-- AllowICMPRedirectsToOverrideOSPFGeneratedRoutes-Examples-Begin -->
|
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
|
<!-- AllowICMPRedirectsToOverrideOSPFGeneratedRoutes-Examples-End -->
|
|
|
|
<!-- AllowICMPRedirectsToOverrideOSPFGeneratedRoutes-End -->
|
|
|
|
<!-- AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers-Begin -->
|
|
## AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers
|
|
|
|
<!-- AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers-Applicability-Begin -->
|
|
| Scope | Editions | Applicable OS |
|
|
|:--|:--|:--|
|
|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
|
|
<!-- AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers-Applicability-End -->
|
|
|
|
<!-- AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers-OmaUri-Begin -->
|
|
```Device
|
|
./Device/Vendor/MSFT/Policy/Config/MSSLegacy/AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers
|
|
```
|
|
<!-- AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers-OmaUri-End -->
|
|
|
|
<!-- AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers-Description-Begin -->
|
|
<!-- Description-Source-Not-Found -->
|
|
<!-- AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers-Description-End -->
|
|
|
|
<!-- AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers-Editable-Begin -->
|
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
|
Allow the computer to ignore NetBIOS name release requests except from WINS servers.
|
|
<!-- AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers-Editable-End -->
|
|
|
|
<!-- AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers-DFProperties-Begin -->
|
|
**Description framework properties**:
|
|
|
|
| Property name | Property value |
|
|
|:--|:--|
|
|
| Format | chr (string) |
|
|
| Access Type | Add, Delete, Get, Replace |
|
|
<!-- AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers-DFProperties-End -->
|
|
|
|
<!-- AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers-AdmxBacked-Begin -->
|
|
<!-- ADMX-Not-Found -->
|
|
> [!TIP]
|
|
> This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
|
|
|
**ADMX mapping**:
|
|
|
|
| Name | Value |
|
|
|:--|:--|
|
|
| Name | Pol_MSS_NoNameReleaseOnDemand |
|
|
| ADMX File Name | mss-legacy.admx |
|
|
<!-- AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers-AdmxBacked-End -->
|
|
|
|
<!-- AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers-Examples-Begin -->
|
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
|
<!-- AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers-Examples-End -->
|
|
|
|
<!-- AllowTheComputerToIgnoreNetBIOSNameReleaseRequestsExceptFromWINSServers-End -->
|
|
|
|
<!-- IPSourceRoutingProtectionLevel-Begin -->
|
|
## IPSourceRoutingProtectionLevel
|
|
|
|
<!-- IPSourceRoutingProtectionLevel-Applicability-Begin -->
|
|
| Scope | Editions | Applicable OS |
|
|
|:--|:--|:--|
|
|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
|
|
<!-- IPSourceRoutingProtectionLevel-Applicability-End -->
|
|
|
|
<!-- IPSourceRoutingProtectionLevel-OmaUri-Begin -->
|
|
```Device
|
|
./Device/Vendor/MSFT/Policy/Config/MSSLegacy/IPSourceRoutingProtectionLevel
|
|
```
|
|
<!-- IPSourceRoutingProtectionLevel-OmaUri-End -->
|
|
|
|
<!-- IPSourceRoutingProtectionLevel-Description-Begin -->
|
|
<!-- Description-Source-Not-Found -->
|
|
<!-- IPSourceRoutingProtectionLevel-Description-End -->
|
|
|
|
<!-- IPSourceRoutingProtectionLevel-Editable-Begin -->
|
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
|
IP source routing protection level (protects against packet spoofing).
|
|
<!-- IPSourceRoutingProtectionLevel-Editable-End -->
|
|
|
|
<!-- IPSourceRoutingProtectionLevel-DFProperties-Begin -->
|
|
**Description framework properties**:
|
|
|
|
| Property name | Property value |
|
|
|:--|:--|
|
|
| Format | chr (string) |
|
|
| Access Type | Add, Delete, Get, Replace |
|
|
<!-- IPSourceRoutingProtectionLevel-DFProperties-End -->
|
|
|
|
<!-- IPSourceRoutingProtectionLevel-AdmxBacked-Begin -->
|
|
<!-- ADMX-Not-Found -->
|
|
> [!TIP]
|
|
> This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
|
|
|
**ADMX mapping**:
|
|
|
|
| Name | Value |
|
|
|:--|:--|
|
|
| Name | Pol_MSS_DisableIPSourceRouting |
|
|
| ADMX File Name | mss-legacy.admx |
|
|
<!-- IPSourceRoutingProtectionLevel-AdmxBacked-End -->
|
|
|
|
<!-- IPSourceRoutingProtectionLevel-Examples-Begin -->
|
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
|
<!-- IPSourceRoutingProtectionLevel-Examples-End -->
|
|
|
|
<!-- IPSourceRoutingProtectionLevel-End -->
|
|
|
|
<!-- IPv6SourceRoutingProtectionLevel-Begin -->
|
|
## IPv6SourceRoutingProtectionLevel
|
|
|
|
<!-- IPv6SourceRoutingProtectionLevel-Applicability-Begin -->
|
|
| Scope | Editions | Applicable OS |
|
|
|:--|:--|:--|
|
|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 1803 [10.0.17134] and later |
|
|
<!-- IPv6SourceRoutingProtectionLevel-Applicability-End -->
|
|
|
|
<!-- IPv6SourceRoutingProtectionLevel-OmaUri-Begin -->
|
|
```Device
|
|
./Device/Vendor/MSFT/Policy/Config/MSSLegacy/IPv6SourceRoutingProtectionLevel
|
|
```
|
|
<!-- IPv6SourceRoutingProtectionLevel-OmaUri-End -->
|
|
|
|
<!-- IPv6SourceRoutingProtectionLevel-Description-Begin -->
|
|
<!-- Description-Source-Not-Found -->
|
|
<!-- IPv6SourceRoutingProtectionLevel-Description-End -->
|
|
|
|
<!-- IPv6SourceRoutingProtectionLevel-Editable-Begin -->
|
|
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|
|
IPv6 source routing protection level (protects against packet spoofing).
|
|
<!-- IPv6SourceRoutingProtectionLevel-Editable-End -->
|
|
|
|
<!-- IPv6SourceRoutingProtectionLevel-DFProperties-Begin -->
|
|
**Description framework properties**:
|
|
|
|
| Property name | Property value |
|
|
|:--|:--|
|
|
| Format | chr (string) |
|
|
| Access Type | Add, Delete, Get, Replace |
|
|
<!-- IPv6SourceRoutingProtectionLevel-DFProperties-End -->
|
|
|
|
<!-- IPv6SourceRoutingProtectionLevel-AdmxBacked-Begin -->
|
|
<!-- ADMX-Not-Found -->
|
|
> [!TIP]
|
|
> This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
|
|
|
**ADMX mapping**:
|
|
|
|
| Name | Value |
|
|
|:--|:--|
|
|
| Name | Pol_MSS_DisableIPSourceRoutingIPv6 |
|
|
| ADMX File Name | mss-legacy.admx |
|
|
<!-- IPv6SourceRoutingProtectionLevel-AdmxBacked-End -->
|
|
|
|
<!-- IPv6SourceRoutingProtectionLevel-Examples-Begin -->
|
|
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
|
|
<!-- IPv6SourceRoutingProtectionLevel-Examples-End -->
|
|
|
|
<!-- IPv6SourceRoutingProtectionLevel-End -->
|
|
|
|
<!-- MSSLegacy-CspMoreInfo-Begin -->
|
|
<!-- Add any additional information about this CSP here. Anything outside this section will get overwritten. -->
|
|
<!-- MSSLegacy-CspMoreInfo-End -->
|
|
|
|
<!-- MSSLegacy-End -->
|
|
|
|
## Related articles
|
|
|
|
[Policy configuration service provider](policy-configuration-service-provider.md)
|