adam/windows-ansible
1
0 Fork 0
mirror of https://git.ecdf.ed.ac.uk/win_automation/windows-ansible.git synced 2026-10-27 21:27:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

cleanup file

Browse Source
This commit is contained in:
abrown38 committed 2024-04-08 18:41:49 +00:00
1 parent 3031cb4b47
commit 86276aa8a3
481 files changed
+125722 -16
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

policy_templates/PolicyDefinitions/DeviceGuard.admx
+171
View File
@@ -0,0 +1,171 @@
<?xml version="1.0" encoding="utf-8"?>
<!-- (c) 2015 Microsoft Corporation -->
<policyDefinitions xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" revision="1.0" schemaVersion="1.0" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
<policyNamespaces>
<target prefix="DeviceGuard" namespace="Microsoft.Windows.DeviceGuard" />
<using prefix="windows" namespace="Microsoft.Policies.Windows" />
</policyNamespaces>
<resources minRequiredRevision="1.0" />
<categories>
<category name="DeviceGuardCategory" displayName="$(string.DeviceGuard)">
<parentCategory ref="windows:System" />
</category>
</categories>
<policies>
<policy
name="VirtualizationBasedSecurity"
clientExtension="{F312195E-3D9D-447A-A3F5-08DFFA24735E}"
displayName="$(string.VirtualizationBasedSecurity)"
explainText="$(string.VirtualizationBasedSecurityHelp)"
presentation="$(presentation.VirtualizationBasedSecurity)"
class="Machine"
key="SOFTWARE\Policies\Microsoft\Windows\DeviceGuard"
valueName="EnableVirtualizationBasedSecurity">
<parentCategory ref="DeviceGuardCategory" />
<supportedOn ref="windows:SUPPORTED_Windows_10_0" />
<enabledValue>
<decimal value="1" />
</enabledValue>
<disabledValue>
<decimal value="0" />
</disabledValue>
<elements>
<enum
id="RequirePlatformSecurityFeaturesDrop"
valueName="RequirePlatformSecurityFeatures">
<item displayName="$(string.SecureBoot)">
<value>
<decimal value="1" />
</value>
</item>
<item displayName="$(string.SecureBootAndDmaProtection)">
<value>
<decimal value="3" />
</value>
</item>
</enum>
<enum
id="HypervisorEnforcedCodeIntegrityDrop"
valueName="HypervisorEnforcedCodeIntegrity">
<item displayName="$(string.Disabled)">
<value>
<decimal value="0" />
</value>
</item>
<item displayName="$(string.EnabledWithUefiLock)">
<value>
<decimal value="1" />
</value>
</item>
<item displayName="$(string.EnabledWithoutLock)">
<value>
<decimal value="2" />
</value>
</item>
<item displayName="$(string.NotConfigured)">
<value>
<decimal value="3" />
</value>
</item>
</enum>
<boolean id="CheckboxMAT" valueName="HVCIMATRequired">
<trueValue>
<decimal value="1" />
</trueValue>
<falseValue>
<decimal value="0" />
</falseValue>
</boolean>
<enum
id="CredentialIsolationDrop"
valueName="LsaCfgFlags">
<item displayName="$(string.Disabled)">
<value>
<decimal value="0" />
</value>
</item>
<item displayName="$(string.EnabledWithUefiLock)">
<value>
<decimal value="1" />
</value>
</item>
<item displayName="$(string.EnabledWithoutLock)">
<value>
<decimal value="2" />
</value>
</item>
<item displayName="$(string.NotConfigured)">
<value>
<decimal value="3" />
</value>
</item>
</enum>
<enum
id="SystemGuardDrop"
valueName="ConfigureSystemGuardLaunch">
<item displayName="$(string.NotConfigured)">
<value>
<decimal value="0" />
</value>
</item>
<item displayName="$(string.Enabled)">
<value>
<decimal value="1" />
</value>
</item>
<item displayName="$(string.Disabled)">
<value>
<decimal value="2" />
</value>
</item>
</enum>
<enum
id="KernelShadowStacksDrop"
valueName="ConfigureKernelShadowStacksLaunch">
<item displayName="$(string.NotConfigured)">
<value>
<decimal value="0" />
</value>
</item>
<item displayName="$(string.EnabledEnforcement)">
<value>
<decimal value="1" />
</value>
</item>
<item displayName="$(string.EnabledAudit)">
<value>
<decimal value="2" />
</value>
</item>
<item displayName="$(string.Disabled)">
<value>
<decimal value="3" />
</value>
</item>
</enum>
</elements>
</policy>
<policy
name="ConfigCIPolicy"
clientExtension="{FC491EF1-C4AA-4CE1-B329-414B101DB823}"
displayName="$(string.ConfigCIPolicy)"
explainText="$(string.ConfigCIPolicyHelp)"
presentation="$(presentation.ConfigCIPolicy)"
class="Machine"
key="SOFTWARE\Policies\Microsoft\Windows\DeviceGuard"
valueName="DeployConfigCIPolicy">
<parentCategory ref="DeviceGuardCategory" />
<supportedOn ref="windows:SUPPORTED_Windows_10_0" />
<enabledValue>
<decimal value="1" />
</enabledValue>
<disabledValue>
<decimal value="0" />
</disabledValue>
<elements>
<text id="ConfigCIPolicyFilePathText" valueName="ConfigCIPolicyFilePath" maxLength="255" required="true" />
</elements>
</policy>
</policies>
</policyDefinitions>