mirror of
https://git.ecdf.ed.ac.uk/win_automation/windows-ansible.git
synced 2026-10-26 18:27:21 +00:00
127 lines
7.3 KiB
XML
127 lines
7.3 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<!-- (c) 2006 Microsoft Corporation -->
|
|
<policyDefinitions xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" revision="1.0" schemaVersion="1.0" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
|
|
<policyNamespaces>
|
|
<target prefix="tpm" namespace="Microsoft.Policies.TrustedPlatformModule" />
|
|
<using prefix="windows" namespace="Microsoft.Policies.Windows" />
|
|
</policyNamespaces>
|
|
<resources minRequiredRevision="1.0" />
|
|
<categories>
|
|
<category name="TPMCategory" displayName="$(string.TPMCategory)">
|
|
<parentCategory ref="windows:System" />
|
|
</category>
|
|
<category name="DSHACategory" displayName="$(string.DSHACategory)">
|
|
<parentCategory ref="windows:System" />
|
|
</category>
|
|
</categories>
|
|
<policies>
|
|
<policy name="OSManagedAuth_Name" class="Machine" displayName="$(string.OSManagedAuth_Name)" explainText="$(string.OSManagedAuth_Help)" presentation="$(presentation.OSManagedAuth_Name)" key="Software\Policies\Microsoft\TPM">
|
|
<parentCategory ref="TPMCategory" />
|
|
<supportedOn ref="windows:SUPPORTED_Windows8" />
|
|
<elements>
|
|
<enum id="SelectOSManagedAuthLevel" valueName="OSManagedAuthLevel" required="true">
|
|
<item displayName="$(string.OSManagedAuth-TpmAuthFull)">
|
|
<value>
|
|
<decimal value="4" />
|
|
</value>
|
|
</item>
|
|
<item displayName="$(string.OSManagedAuth-TpmAuthAdminPlusUser)">
|
|
<value>
|
|
<decimal value="2" />
|
|
</value>
|
|
</item>
|
|
<item displayName="$(string.OSManagedAuth-TpmAuthNone)">
|
|
<value>
|
|
<decimal value="0" />
|
|
</value>
|
|
</item>
|
|
</enum>
|
|
</elements>
|
|
</policy>
|
|
<policy name="BlockedCommandsList_Name" class="Machine" displayName="$(string.BlockedCommandsList_Name)" explainText="$(string.BlockedCommandsList_Help)" presentation="$(presentation.BlockedCommandsList_Name)" key="SOFTWARE\Policies\Microsoft\Tpm\BlockedCommands" valueName="Enabled">
|
|
<parentCategory ref="TPMCategory" />
|
|
<supportedOn ref="windows:SUPPORTED_WindowsVista" />
|
|
<enabledValue>
|
|
<decimal value="1" />
|
|
</enabledValue>
|
|
<disabledValue>
|
|
<decimal value="0" />
|
|
</disabledValue>
|
|
<elements>
|
|
<list id="BlockedCommandsList_Ordinals2" key="SOFTWARE\Policies\Microsoft\Tpm\BlockedCommands\List" additive="true" />
|
|
</elements>
|
|
</policy>
|
|
<policy name="IgnoreDefaultList_Name" class="Machine" displayName="$(string.IgnoreDefaultList_Name)" explainText="$(string.IgnoreDefaultList_Help)" key="Software\Policies\Microsoft\TPM\BlockedCommands" valueName="IgnoreDefaultList">
|
|
<parentCategory ref="TPMCategory" />
|
|
<supportedOn ref="windows:SUPPORTED_WindowsVista" />
|
|
<enabledValue>
|
|
<decimal value="1" />
|
|
</enabledValue>
|
|
<disabledValue>
|
|
<decimal value="0" />
|
|
</disabledValue>
|
|
</policy>
|
|
<policy name="IgnoreLocalList_Name" class="Machine" displayName="$(string.IgnoreLocalList_Name)" explainText="$(string.IgnoreLocalList_Help)" key="Software\Policies\Microsoft\TPM\BlockedCommands" valueName="IgnoreLocalList">
|
|
<parentCategory ref="TPMCategory" />
|
|
<supportedOn ref="windows:SUPPORTED_WindowsVista" />
|
|
<enabledValue>
|
|
<decimal value="1" />
|
|
</enabledValue>
|
|
<disabledValue>
|
|
<decimal value="0" />
|
|
</disabledValue>
|
|
</policy>
|
|
<policy name="StandardUserAuthorizationFailureDuration_Name" class="Machine" displayName="$(string.StandardUserAuthorizationFailureDuration_Name)" explainText="$(string.StandardUserAuthorizationFailureDuration_Name_Help)" presentation="$(presentation.StandardUserAuthorizationFailureDuration_Name)" key="Software\Policies\Microsoft\Tpm" valueName="StandardUserAuthorizationFailureDuration">
|
|
<parentCategory ref="TPMCategory" />
|
|
<supportedOn ref="windows:SUPPORTED_Windows8" />
|
|
<elements>
|
|
<decimal id="DXT_StandardUserAuthorizationFailureDuration_Name" key="Software\Policies\Microsoft\Tpm" valueName="StandardUserAuthorizationFailureDuration" maxValue="10000" />
|
|
</elements>
|
|
</policy>
|
|
<policy name="StandardUserAuthorizationFailureIndividualThreshold_Name" class="Machine" displayName="$(string.StandardUserAuthorizationFailureIndividualThreshold_Name)" explainText="$(string.StandardUserAuthorizationFailureIndividualThreshold_Name_Help)" presentation="$(presentation.StandardUserAuthorizationFailureIndividualThreshold_Name)" key="Software\Policies\Microsoft\Tpm" valueName="StandardUserAuthorizationFailureIndividualThreshold">
|
|
<parentCategory ref="TPMCategory" />
|
|
<supportedOn ref="windows:SUPPORTED_Windows8" />
|
|
<elements>
|
|
<decimal id="DXT_StandardUserAuthorizationFailureIndividualThreshold_Name" key="Software\Policies\Microsoft\Tpm" valueName="StandardUserAuthorizationFailureIndividualThreshold" maxValue="100" />
|
|
</elements>
|
|
</policy>
|
|
<policy name="StandardUserAuthorizationFailureTotalThreshold_Name" class="Machine" displayName="$(string.StandardUserAuthorizationFailureTotalThreshold_Name)" explainText="$(string.StandardUserAuthorizationFailureTotalThreshold_Name_Help)" presentation="$(presentation.StandardUserAuthorizationFailureTotalThreshold_Name)" key="Software\Policies\Microsoft\Tpm" valueName="StandardUserAuthorizationFailureTotalThreshold">
|
|
<parentCategory ref="TPMCategory" />
|
|
<supportedOn ref="windows:SUPPORTED_Windows8" />
|
|
<elements>
|
|
<decimal id="DXT_StandardUserAuthorizationFailureTotalThreshold_Name" key="Software\Policies\Microsoft\Tpm" valueName="StandardUserAuthorizationFailureTotalThreshold" maxValue="100" />
|
|
</elements>
|
|
</policy>
|
|
<policy name="UseLegacyDAP_Name" class="Machine" displayName="$(string.UseLegacyDAP_Name)" explainText="$(string.UseLegacyDAP_Help)" key="Software\Policies\Microsoft\TPM" valueName="UseLegacyDictionaryAttackParameters">
|
|
<parentCategory ref="TPMCategory" />
|
|
<supportedOn ref="windows:SUPPORTED_Windows_10_0_RS2" />
|
|
<enabledValue>
|
|
<decimal value="1" />
|
|
</enabledValue>
|
|
<disabledValue>
|
|
<decimal value="0" />
|
|
</disabledValue>
|
|
</policy>
|
|
<policy name="OptIntoDSHA_Name" class="Machine" displayName="$(string.OptIntoDSHA_Name)" explainText="$(string.OptIntoDSHA_Help)" key="Software\Policies\Microsoft\DeviceHealthAttestationService" valueName="EnableDeviceHealthAttestationService">
|
|
<parentCategory ref="DSHACategory" />
|
|
<supportedOn ref="windows:SUPPORTED_Windows_10_0_RS3" />
|
|
<enabledValue>
|
|
<decimal value="1" />
|
|
</enabledValue>
|
|
<disabledValue>
|
|
<decimal value="0" />
|
|
</disabledValue>
|
|
</policy>
|
|
<policy name="ClearTPMIfNotReady_Name" class="Machine" displayName="$(string.ClearTPMIfNotReady_Name)" explainText="$(string.ClearTPMIfNotReady_Help)" key="Software\Policies\Microsoft\TPM" valueName="ClearTPMIfNotReadyGP">
|
|
<parentCategory ref="TPMCategory" />
|
|
<supportedOn ref="windows:SUPPORTED_Windows_10_0_RS3" />
|
|
<enabledValue>
|
|
<decimal value="1" />
|
|
</enabledValue>
|
|
<disabledValue>
|
|
<decimal value="0" />
|
|
</disabledValue>
|
|
</policy>
|
|
</policies>
|
|
</policyDefinitions>
|