129 lines
5.4 KiB
JSON
129 lines
5.4 KiB
JSON
{
|
|
"@odata.context": "https://graph.microsoft.com/beta/$metadata#deviceManagement/configurationPolicies/$entity",
|
|
"createdDateTime": "2025-03-16T05:44:19.61118Z",
|
|
"creationSource": null,
|
|
"description": "WARNING: Applying this policy to Devices will cause a reboot between Device and User ESP phases!\nNOTE: These features are automatically enabled on a fresh Win11 22H2 or above install, however they require Windows Enterprise to function correctly. They also require hardware support: \nhttps://learn.microsoft.com/en-us/windows-hardware/design/device-experiences/oem-vbs",
|
|
"lastModifiedDateTime": "2025-03-16T05:44:19.61118Z",
|
|
"name": "Win - SC - Device Security - U - Device Guard, Credential Guard and HVCI",
|
|
"platforms": "windows10",
|
|
"priorityMetaData": null,
|
|
"roleScopeTagIds": [
|
|
"0"
|
|
],
|
|
"settingCount": 8,
|
|
"technologies": "mdm",
|
|
"id": "0f90b2f2-87a4-44c3-9142-f51033809ece",
|
|
"templateReference": {
|
|
"templateId": "",
|
|
"templateFamily": "none",
|
|
"templateDisplayName": null,
|
|
"templateDisplayVersion": null
|
|
},
|
|
"settings": [
|
|
{
|
|
"id": "0",
|
|
"settingInstance": {
|
|
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
|
|
"settingDefinitionId": "device_vendor_msft_policy_config_deviceguard_configuresystemguardlaunch",
|
|
"settingInstanceTemplateReference": null,
|
|
"choiceSettingValue": {
|
|
"settingValueTemplateReference": null,
|
|
"value": "device_vendor_msft_policy_config_deviceguard_configuresystemguardlaunch_1",
|
|
"children": []
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"id": "1",
|
|
"settingInstance": {
|
|
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
|
|
"settingDefinitionId": "device_vendor_msft_policy_config_deviceguard_lsacfgflags",
|
|
"settingInstanceTemplateReference": null,
|
|
"choiceSettingValue": {
|
|
"settingValueTemplateReference": null,
|
|
"value": "device_vendor_msft_policy_config_deviceguard_lsacfgflags_2",
|
|
"children": []
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"id": "2",
|
|
"settingInstance": {
|
|
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
|
|
"settingDefinitionId": "device_vendor_msft_policy_config_deviceguard_enablevirtualizationbasedsecurity",
|
|
"settingInstanceTemplateReference": null,
|
|
"choiceSettingValue": {
|
|
"settingValueTemplateReference": null,
|
|
"value": "device_vendor_msft_policy_config_deviceguard_enablevirtualizationbasedsecurity_1",
|
|
"children": []
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"id": "3",
|
|
"settingInstance": {
|
|
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
|
|
"settingDefinitionId": "device_vendor_msft_policy_config_deviceguard_machineidentityisolation",
|
|
"settingInstanceTemplateReference": null,
|
|
"choiceSettingValue": {
|
|
"settingValueTemplateReference": null,
|
|
"value": "device_vendor_msft_policy_config_deviceguard_machineidentityisolation_0",
|
|
"children": []
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"id": "4",
|
|
"settingInstance": {
|
|
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
|
|
"settingDefinitionId": "device_vendor_msft_policy_config_deviceguard_requireplatformsecurityfeatures",
|
|
"settingInstanceTemplateReference": null,
|
|
"choiceSettingValue": {
|
|
"settingValueTemplateReference": null,
|
|
"value": "device_vendor_msft_policy_config_deviceguard_requireplatformsecurityfeatures_3",
|
|
"children": []
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"id": "5",
|
|
"settingInstance": {
|
|
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
|
|
"settingDefinitionId": "device_vendor_msft_policy_config_localsecurityauthority_configurelsaprotectedprocess",
|
|
"settingInstanceTemplateReference": null,
|
|
"choiceSettingValue": {
|
|
"settingValueTemplateReference": null,
|
|
"value": "device_vendor_msft_policy_config_localsecurityauthority_configurelsaprotectedprocess_2",
|
|
"children": []
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"id": "6",
|
|
"settingInstance": {
|
|
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
|
|
"settingDefinitionId": "device_vendor_msft_policy_config_virtualizationbasedtechnology_hypervisorenforcedcodeintegrity",
|
|
"settingInstanceTemplateReference": null,
|
|
"choiceSettingValue": {
|
|
"settingValueTemplateReference": null,
|
|
"value": "device_vendor_msft_policy_config_virtualizationbasedtechnology_hypervisorenforcedcodeintegrity_2",
|
|
"children": []
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"id": "7",
|
|
"settingInstance": {
|
|
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
|
|
"settingDefinitionId": "device_vendor_msft_policy_config_virtualizationbasedtechnology_requireuefimemoryattributestable",
|
|
"settingInstanceTemplateReference": null,
|
|
"choiceSettingValue": {
|
|
"settingValueTemplateReference": null,
|
|
"value": "device_vendor_msft_policy_config_virtualizationbasedtechnology_requireuefimemoryattributestable_1",
|
|
"children": []
|
|
}
|
|
}
|
|
}
|
|
]
|
|
}
|