windows-itpro-docs/windows/client-management/mdm/policy-csp-mssecurityguide.md
2019-06-06 11:31:31 -07:00

12 KiB

title, description, ms.author, ms.topic, ms.prod, ms.technology, author, ms.date, ms.reviewer, manager
title description ms.author ms.topic ms.prod ms.technology author ms.date ms.reviewer manager
Policy CSP - MSSecurityGuide Policy CSP - MSSecurityGuide v-madhi article w10 windows manikadhiman 04/16/2018 dansimp

Policy CSP - MSSecurityGuide


MSSecurityGuide policies

MSSecurityGuide/ApplyUACRestrictionsToLocalAccountsOnNetworkLogon
MSSecurityGuide/ConfigureSMBV1ClientDriver
MSSecurityGuide/ConfigureSMBV1Server
MSSecurityGuide/EnableStructuredExceptionHandlingOverwriteProtection
MSSecurityGuide/TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications
MSSecurityGuide/WDigestAuthentication

MSSecurityGuide/ApplyUACRestrictionsToLocalAccountsOnNetworkLogon

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark cross mark cross mark

Scope:

[!div class = "checklist"]

  • Device

Tip

This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see Understanding ADMX-backed policies.

You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to Enabling a policy.

The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see CDATA Sections.

ADMX Info:

  • GP name: Pol_SecGuide_0201_LATFP
  • GP ADMX file name: SecGuide.admx

MSSecurityGuide/ConfigureSMBV1ClientDriver

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark cross mark cross mark

Scope:

[!div class = "checklist"]

  • Device

Tip

This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see Understanding ADMX-backed policies.

You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to Enabling a policy.

The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see CDATA Sections.

ADMX Info:

  • GP name: Pol_SecGuide_0002_SMBv1_ClientDriver
  • GP ADMX file name: SecGuide.admx

MSSecurityGuide/ConfigureSMBV1Server

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark cross mark cross mark

Scope:

[!div class = "checklist"]

  • Device

Tip

This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see Understanding ADMX-backed policies.

You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to Enabling a policy.

The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see CDATA Sections.

ADMX Info:

  • GP name: Pol_SecGuide_0001_SMBv1_Server
  • GP ADMX file name: SecGuide.admx

MSSecurityGuide/EnableStructuredExceptionHandlingOverwriteProtection

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark cross mark cross mark

Scope:

[!div class = "checklist"]

  • Device

Tip

This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see Understanding ADMX-backed policies.

You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to Enabling a policy.

The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see CDATA Sections.

ADMX Info:

  • GP name: Pol_SecGuide_0102_SEHOP
  • GP ADMX file name: SecGuide.admx

MSSecurityGuide/TurnOnWindowsDefenderProtectionAgainstPotentiallyUnwantedApplications

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark cross mark cross mark

Scope:

[!div class = "checklist"]

  • Device

Tip

This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see Understanding ADMX-backed policies.

You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to Enabling a policy.

The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see CDATA Sections.

ADMX Info:

  • GP name: Pol_SecGuide_0101_WDPUA
  • GP ADMX file name: SecGuide.admx

MSSecurityGuide/WDigestAuthentication

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark cross mark cross mark

Scope:

[!div class = "checklist"]

  • Device

Tip

This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see Understanding ADMX-backed policies.

You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to Enabling a policy.

The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see CDATA Sections.

ADMX Info:

  • GP name: Pol_SecGuide_0202_WDigestAuthn
  • GP ADMX file name: SecGuide.admx

Footnote:

  • 1 - Added in Windows 10, version 1607.
  • 2 - Added in Windows 10, version 1703.
  • 3 - Added in Windows 10, version 1709.
  • 4 - Added in Windows 10, version 1803.