deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-23 14:23:38 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity
Files
e7c8005622d8b8a7c9c92a08b2c83c94e0233bb7
windows-itpro-docs/windows/security/threat-protection/windows-firewall/encryption-zone-gpos.md
Liz Long 2eae16f36f remove certain values from ms.collection
2022-12-08 16:56:46 -05:00

1.4 KiB
Raw Blame History

title, description, ms.reviewer, ms.author, ms.prod, ms.localizationpriority, author, manager, ms.topic, ms.date, ms.technology, appliesto
title description ms.reviewer ms.author ms.prod ms.localizationpriority author manager ms.topic ms.date ms.technology appliesto
Encryption Zone GPOs (Windows) Learn how to add a device to an encryption zone by adding the device account to the encryption zone group in Windows Defender Firewall with Advanced Security. jekrynit paoloma windows-client medium paolomatarazzo aaroncz conceptual 09/08/2021 itpro-security
✅ <b>Windows 10</b>
✅ <b>Windows 11</b>
✅ <b>Windows Server 2016</b>
✅ <b>Windows Server 2019</b>
✅ <b>Windows Server 2022</b>

Encryption Zone GPOs

Handle encryption zones in a similar manner to the boundary zones. A device is added to an encryption zone by adding the device account to the encryption zone group. Woodgrove Bank has a single service that must be protected, and the devices that are running that service are added to the group CG_DOMISO_Encryption. This group is granted Read and Apply Group Policy permissions in on the GPO described in this section.

The GPO is only for server versions of Windows. Client devices aren't expected to participate in the encryption zone. If the need for one occurs, either create a new GPO for that version of Windows or expand the WMI filter attached to one of the existing encryption zone GPOs to make it apply to the client version of Windows.