Tomster/Windows-Setup
1
0
Fork 0
mirror of https://github.com/TommyTran732/Windows-Setup.git synced 2024-11-12 11:11:54 -05:00
Code
19fce1cb20
Windows-Setup/Group Policies Objects/Default Domain Policy/Device Guard.md

11 lines
458 B
Markdown
Raw Normal View History

Update policies Signed-off-by: Tommy <contact@tommytran.io>
2023-12-30 23:54:28 -05:00
# Device Guard
`Computer Configuration\Administrative Templates\System\Device Guard`
Update policies Signed-off-by: Tommy <contact@tommytran.io>
2023-12-31 00:27:37 -05:00
- Turn On Virtualization Based Security -> Enabled
Update policies Signed-off-by: Tommy <contact@tommytran.io>
2023-12-30 23:54:28 -05:00
1. Select Platform Security Level: Secure Boot and DMA Protection
2. Virtualization Based Protection of Code Integrity: Enabled with UEFI lock
3. Credential Guard Configuration: Enabled with UEFI lock
4. Secure Launch Configuration: Enabled
5. Kernel-mode Hardware-enforced Stack Protection: Enabled in enforcement mode
Copy Permalink