mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-29 05:37:22 +00:00
76 lines
4.2 KiB
Markdown
76 lines
4.2 KiB
Markdown
---
|
||
title: Checklist Configuring Rules for the Encryption Zone (Windows 10)
|
||
description: Checklist Configuring Rules for the Encryption Zone
|
||
ms.assetid: 87b1787b-0c70-47a4-ae52-700bff505ea4
|
||
author: brianlic-msft
|
||
---
|
||
|
||
# Checklist: Configuring Rules for the Encryption Zone
|
||
|
||
|
||
This checklist includes tasks for configuring connection security rules and IPsec settings in your GPOs to implement the encryption zone in an isolated domain.
|
||
|
||
Rules for the encryption zone are typically the same as those for the isolated domain, with the exception that the main rule requires encryption in addition to authentication.
|
||
|
||
**Checklist: Configuring encryption zone rules for Windows 8, Windows 7, Windows Vista, Windows Server 2012, Windows Server 2008, or Windows Server 2008 R2**
|
||
|
||
A GPO for Windows 8, Windows 7, Windows Vista, Windows Server 2012, Windows Server 2008, and Windows Server 2008 R2 can simply be copied and then customized. This checklist assumes that you have already created the GPO for the isolated domain as described in [Checklist: Implementing a Domain Isolation Policy Design](checklist-implementing-a-domain-isolation-policy-design.md). You can then copy those GPOs for use with the encryption zone. After you create the copies, modify the main rule to require encryption in addition to the authentication required by the rest of the isolated domain.
|
||
|
||
<table>
|
||
<colgroup>
|
||
<col width="33%" />
|
||
<col width="33%" />
|
||
<col width="33%" />
|
||
</colgroup>
|
||
<thead>
|
||
<tr class="header">
|
||
<th></th>
|
||
<th>Task</th>
|
||
<th>Reference</th>
|
||
</tr>
|
||
</thead>
|
||
<tbody>
|
||
<tr class="odd">
|
||
<td><p><img src="images/wfas-icon-checkbox.gif" alt="_" /></p></td>
|
||
<td><p>Make a copy of the domain isolation GPOs to serve as a starting point for the GPOs for the encryption zone.</p></td>
|
||
<td><p><img src="images/15dd35b6-6cc6-421f-93f8-7109920e7144.gif" alt="Procedure topic" />[Copy a GPO to Create a New GPO](copy-a-gpo-to-create-a-new-gpo.md)</p></td>
|
||
</tr>
|
||
<tr class="even">
|
||
<td><p><img src="images/wfas-icon-checkbox.gif" alt="_" /></p></td>
|
||
<td><p>Modify the group memberships and WMI filters so that they are correct for the encryption zone and the version of Windows for which this GPO is intended.</p></td>
|
||
<td><p><img src="images/15dd35b6-6cc6-421f-93f8-7109920e7144.gif" alt="Procedure topic" />[Modify GPO Filters to Apply to a Different Zone or Version of Windows](modify-gpo-filters-to-apply-to-a-different-zone-or-version-of-windows.md)</p></td>
|
||
</tr>
|
||
<tr class="odd">
|
||
<td><p><img src="images/wfas-icon-checkbox.gif" alt="_" /></p></td>
|
||
<td><p>Add the encryption requirements for the zone.</p></td>
|
||
<td><p><img src="images/15dd35b6-6cc6-421f-93f8-7109920e7144.gif" alt="Procedure topic" />[Configure the Rules to Require Encryption on Windows 8, Windows 7, Windows Vista, Windows Server 2012, Windows Server 2008, and Windows Server 2008 R2](configure-the-rules-to-require-encryption-on-windows-8-windows-7-windows-vista-windows-server-2012-windows-server-2008-and-windows-server-2008-r2.md)</p></td>
|
||
</tr>
|
||
<tr class="even">
|
||
<td><p><img src="images/wfas-icon-checkbox.gif" alt="_" /></p></td>
|
||
<td><p>Link the GPO to the domain level of the Active Directory organizational unit hierarchy.</p></td>
|
||
<td><p><img src="images/15dd35b6-6cc6-421f-93f8-7109920e7144.gif" alt="Procedure topic" />[Link the GPO to the Domain](link-the-gpo-to-the-domain.md)</p></td>
|
||
</tr>
|
||
<tr class="odd">
|
||
<td><p><img src="images/wfas-icon-checkbox.gif" alt="_" /></p></td>
|
||
<td><p>Add your test computers to the membership group for the encryption zone. Be sure to add at least one for each operating system supported by a different GPO in the group.</p></td>
|
||
<td><p><img src="images/15dd35b6-6cc6-421f-93f8-7109920e7144.gif" alt="Procedure topic" />[Add Test Computers to the Membership Group for a Zone](add-test-computers-to-the-membership-group-for-a-zone.md)</p></td>
|
||
</tr>
|
||
<tr class="even">
|
||
<td><p><img src="images/wfas-icon-checkbox.gif" alt="_" /></p></td>
|
||
<td><p>Verify that the connection security rules are protecting network traffic.</p></td>
|
||
<td><p><img src="images/15dd35b6-6cc6-421f-93f8-7109920e7144.gif" alt="Procedure topic" />[Verify That Network Traffic Is Authenticated](verify-that-network-traffic-is-authenticated.md)</p></td>
|
||
</tr>
|
||
</tbody>
|
||
</table>
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|