{ "policy": { "@odata.context": "https://graph.microsoft.com/beta/$metadata#deviceManagement/deviceConfigurations/$entity", "@odata.type": "#microsoft.graph.windows10EndpointProtectionConfiguration", "id": "dcd1a686-d9b4-4662-8d86-3c4d6090bebb", "lastModifiedDateTime": "2024-11-29T13:45:01.7005482Z", "roleScopeTagIds": [ "0" ], "supportsScopeTags": true, "deviceManagementApplicabilityRuleOsEdition": null, "deviceManagementApplicabilityRuleOsVersion": null, "deviceManagementApplicabilityRuleDeviceMode": null, "createdDateTime": "2023-06-23T09:32:52.489943Z", "description": "Richtlinie konfugiert sicherreleve Einstellungen für Windows", "displayName": "Default Windows Endpoint Protection Policy", "version": 5, "applicationGuardEnabled": false, "applicationGuardEnabledOptions": "notConfigured", "applicationGuardBlockFileTransfer": "notConfigured", "applicationGuardBlockNonEnterpriseContent": false, "applicationGuardAllowPersistence": false, "applicationGuardForceAuditing": false, "applicationGuardBlockClipboardSharing": "notConfigured", "applicationGuardAllowPrintToPDF": false, "applicationGuardAllowPrintToXPS": false, "applicationGuardAllowPrintToLocalPrinters": false, "applicationGuardAllowPrintToNetworkPrinters": false, "applicationGuardAllowVirtualGPU": false, "applicationGuardAllowFileSaveOnHost": false, "applicationGuardAllowCameraMicrophoneRedirection": null, "applicationGuardCertificateThumbprints": [ ], "appLockerApplicationControl": "notConfigured", "bitLockerAllowStandardUserEncryption": false, "bitLockerDisableWarningForOtherDiskEncryption": false, "bitLockerEnableStorageCardEncryptionOnMobile": false, "bitLockerEncryptDevice": false, "bitLockerRecoveryPasswordRotation": "notConfigured", "defenderSecurityCenterDisableAppBrowserUI": null, "defenderSecurityCenterDisableFamilyUI": null, "defenderSecurityCenterDisableHealthUI": null, "defenderSecurityCenterDisableNetworkUI": null, "defenderSecurityCenterDisableVirusUI": null, "defenderSecurityCenterDisableAccountUI": null, "defenderSecurityCenterDisableClearTpmUI": null, "defenderSecurityCenterDisableHardwareUI": null, "defenderSecurityCenterDisableNotificationAreaUI": null, "defenderSecurityCenterDisableRansomwareUI": null, "defenderSecurityCenterDisableSecureBootUI": null, "defenderSecurityCenterDisableTroubleshootingUI": null, "defenderSecurityCenterDisableVulnerableTpmFirmwareUpdateUI": null, "defenderSecurityCenterOrganizationDisplayName": null, "defenderSecurityCenterHelpEmail": null, "defenderSecurityCenterHelpPhone": null, "defenderSecurityCenterHelpURL": null, "defenderSecurityCenterNotificationsFromApp": "notConfigured", "defenderSecurityCenterITContactDisplay": "notConfigured", "windowsDefenderTamperProtection": "notConfigured", "defenderAdobeReaderLaunchChildProcess": "notConfigured", "defenderAttackSurfaceReductionExcludedPaths": [ ], "defenderOfficeAppsOtherProcessInjectionType": "userDefined", "defenderOfficeAppsOtherProcessInjection": "userDefined", "defenderOfficeCommunicationAppsLaunchChildProcess": "notConfigured", "defenderOfficeAppsExecutableContentCreationOrLaunchType": "userDefined", "defenderOfficeAppsExecutableContentCreationOrLaunch": "userDefined", "defenderOfficeAppsLaunchChildProcessType": "userDefined", "defenderOfficeAppsLaunchChildProcess": "userDefined", "defenderOfficeMacroCodeAllowWin32ImportsType": "userDefined", "defenderOfficeMacroCodeAllowWin32Imports": "userDefined", "defenderScriptObfuscatedMacroCodeType": "userDefined", "defenderScriptObfuscatedMacroCode": "userDefined", "defenderScriptDownloadedPayloadExecutionType": "userDefined", "defenderScriptDownloadedPayloadExecution": "userDefined", "defenderPreventCredentialStealingType": "notConfigured", "defenderProcessCreationType": "userDefined", "defenderProcessCreation": "userDefined", "defenderUntrustedUSBProcessType": "userDefined", "defenderUntrustedUSBProcess": "userDefined", "defenderUntrustedExecutableType": "userDefined", "defenderUntrustedExecutable": "userDefined", "defenderEmailContentExecutionType": "userDefined", "defenderEmailContentExecution": "userDefined", "defenderAdvancedRansomewareProtectionType": "notConfigured", "defenderGuardMyFoldersType": "userDefined", "defenderGuardedFoldersAllowedAppPaths": [ ], "defenderAdditionalGuardedFolders": [ ], "defenderNetworkProtectionType": "notConfigured", "defenderExploitProtectionXml": null, "defenderExploitProtectionXmlFileName": null, "defenderSecurityCenterBlockExploitProtectionOverride": false, "defenderBlockPersistenceThroughWmiType": "userDefined", "firewallBlockStatefulFTP": null, "firewallIdleTimeoutForSecurityAssociationInSeconds": null, "firewallPreSharedKeyEncodingMethod": "deviceDefault", "firewallIPSecExemptionsNone": false, "firewallIPSecExemptionsAllowNeighborDiscovery": false, "firewallIPSecExemptionsAllowICMP": false, "firewallIPSecExemptionsAllowRouterDiscovery": false, "firewallIPSecExemptionsAllowDHCP": false, "firewallCertificateRevocationListCheckMethod": "deviceDefault", "firewallMergeKeyingModuleSettings": null, "firewallPacketQueueingMethod": "deviceDefault", "firewallProfileDomain": null, "firewallProfilePublic": null, "firewallProfilePrivate": null, "localSecurityOptionsBlockMicrosoftAccounts": false, "localSecurityOptionsBlockRemoteLogonWithBlankPassword": true, "localSecurityOptionsDisableAdministratorAccount": false, "localSecurityOptionsAdministratorAccountName": null, "localSecurityOptionsDisableGuestAccount": true, "localSecurityOptionsGuestAccountName": null, "localSecurityOptionsAllowUndockWithoutHavingToLogon": false, "localSecurityOptionsBlockUsersInstallingPrinterDrivers": true, "localSecurityOptionsBlockRemoteOpticalDriveAccess": false, "localSecurityOptionsFormatAndEjectOfRemovableMediaAllowedUser": "notConfigured", "localSecurityOptionsMachineInactivityLimit": 5, "localSecurityOptionsMachineInactivityLimitInMinutes": 5, "localSecurityOptionsDoNotRequireCtrlAltDel": false, "localSecurityOptionsHideLastSignedInUser": false, "localSecurityOptionsHideUsernameAtSignIn": false, "localSecurityOptionsLogOnMessageTitle": null, "localSecurityOptionsLogOnMessageText": null, "localSecurityOptionsAllowPKU2UAuthenticationRequests": false, "localSecurityOptionsAllowRemoteCallsToSecurityAccountsManagerHelperBool": false, "localSecurityOptionsAllowRemoteCallsToSecurityAccountsManager": null, "localSecurityOptionsMinimumSessionSecurityForNtlmSspBasedClients": "none", "localSecurityOptionsMinimumSessionSecurityForNtlmSspBasedServers": "none", "lanManagerAuthenticationLevel": "lmNtlmV2AndNotLmOrNtm", "lanManagerWorkstationDisableInsecureGuestLogons": false, "localSecurityOptionsClearVirtualMemoryPageFile": false, "localSecurityOptionsAllowSystemToBeShutDownWithoutHavingToLogOn": false, "localSecurityOptionsAllowUIAccessApplicationElevation": false, "localSecurityOptionsVirtualizeFileAndRegistryWriteFailuresToPerUserLocations": false, "localSecurityOptionsOnlyElevateSignedExecutables": false, "localSecurityOptionsAdministratorElevationPromptBehavior": "promptForConsent", "localSecurityOptionsStandardUserElevationPromptBehavior": "promptForCredentialsOnTheSecureDesktop", "localSecurityOptionsSwitchToSecureDesktopWhenPromptingForElevation": false, "localSecurityOptionsDetectApplicationInstallationsAndPromptForElevation": false, "localSecurityOptionsAllowUIAccessApplicationsForSecureLocations": false, "localSecurityOptionsUseAdminApprovalMode": false, "localSecurityOptionsUseAdminApprovalModeForAdministrators": false, "localSecurityOptionsInformationShownOnLockScreen": "notConfigured", "localSecurityOptionsInformationDisplayedOnLockScreen": "notConfigured", "localSecurityOptionsDisableClientDigitallySignCommunicationsIfServerAgrees": false, "localSecurityOptionsClientDigitallySignCommunicationsAlways": true, "localSecurityOptionsClientSendUnencryptedPasswordToThirdPartySMBServers": false, "localSecurityOptionsDisableServerDigitallySignCommunicationsAlways": true, "localSecurityOptionsDisableServerDigitallySignCommunicationsIfClientAgrees": true, "localSecurityOptionsRestrictAnonymousAccessToNamedPipesAndShares": false, "localSecurityOptionsDoNotAllowAnonymousEnumerationOfSAMAccounts": true, "localSecurityOptionsAllowAnonymousEnumerationOfSAMAccountsAndShares": true, "localSecurityOptionsDoNotStoreLANManagerHashValueOnNextPasswordChange": false, "localSecurityOptionsSmartCardRemovalBehavior": "noAction", "deviceGuardLocalSystemAuthorityCredentialGuardSettings": "enableWithUEFILock", "deviceGuardEnableVirtualizationBasedSecurity": true, "deviceGuardEnableSecureBootWithDMA": true, "deviceGuardSecureBootWithDMA": "notConfigured", "deviceGuardLaunchSystemGuard": "notConfigured", "defenderDisableScanArchiveFiles": null, "defenderAllowScanArchiveFiles": null, "defenderDisableBehaviorMonitoring": null, "defenderAllowBehaviorMonitoring": null, "defenderDisableCloudProtection": null, "defenderAllowCloudProtection": null, "defenderEnableScanIncomingMail": null, "defenderEnableScanMappedNetworkDrivesDuringFullScan": null, "defenderDisableScanRemovableDrivesDuringFullScan": null, "defenderAllowScanRemovableDrivesDuringFullScan": null, "defenderDisableScanDownloads": null, "defenderAllowScanDownloads": null, "defenderDisableIntrusionPreventionSystem": null, "defenderAllowIntrusionPreventionSystem": null, "defenderDisableOnAccessProtection": null, "defenderAllowOnAccessProtection": null, "defenderDisableRealTimeMonitoring": null, "defenderAllowRealTimeMonitoring": null, "defenderDisableScanNetworkFiles": null, "defenderAllowScanNetworkFiles": null, "defenderDisableScanScriptsLoadedInInternetExplorer": null, "defenderAllowScanScriptsLoadedInInternetExplorer": null, "defenderBlockEndUserAccess": null, "defenderAllowEndUserAccess": null, "defenderScanMaxCpuPercentage": null, "defenderCheckForSignaturesBeforeRunningScan": null, "defenderCloudBlockLevel": null, "defenderCloudExtendedTimeoutInSeconds": null, "defenderDaysBeforeDeletingQuarantinedMalware": null, "defenderDisableCatchupFullScan": null, "defenderDisableCatchupQuickScan": null, "defenderEnableLowCpuPriority": null, "defenderFileExtensionsToExclude": [ ], "defenderFilesAndFoldersToExclude": [ ], "defenderProcessesToExclude": [ ], "defenderPotentiallyUnwantedAppAction": null, "defenderScanDirection": null, "defenderScanType": null, "defenderScheduledQuickScanTime": null, "defenderScheduledScanDay": null, "defenderScheduledScanTime": null, "defenderSignatureUpdateIntervalInHours": null, "defenderSubmitSamplesConsentType": null, "defenderDetectedMalwareActions": null, "dmaGuardDeviceEnumerationPolicy": "deviceDefault", "smartScreenEnableInShell": true, "smartScreenBlockOverrideForFiles": true, "userRightsAccessCredentialManagerAsTrustedCaller": null, "userRightsAllowAccessFromNetwork": null, "userRightsBlockAccessFromNetwork": null, "userRightsActAsPartOfTheOperatingSystem": null, "userRightsLocalLogOn": null, "userRightsDenyLocalLogOn": null, "userRightsBackupData": null, "userRightsChangeSystemTime": null, "userRightsCreateGlobalObjects": null, "userRightsCreatePageFile": null, "userRightsCreatePermanentSharedObjects": null, "userRightsCreateSymbolicLinks": null, "userRightsCreateToken": null, "userRightsDebugPrograms": null, "userRightsRemoteDesktopServicesLogOn": null, "userRightsDelegation": null, "userRightsGenerateSecurityAudits": null, "userRightsImpersonateClient": null, "userRightsIncreaseSchedulingPriority": null, "userRightsLoadUnloadDrivers": null, "userRightsLockMemory": null, "userRightsManageAuditingAndSecurityLogs": null, "userRightsManageVolumes": null, "userRightsModifyFirmwareEnvironment": null, "userRightsModifyObjectLabels": null, "userRightsProfileSingleProcess": null, "userRightsRemoteShutdown": null, "userRightsRestoreData": null, "userRightsTakeOwnership": null, "xboxServicesEnableXboxGameSaveTask": false, "xboxServicesAccessoryManagementServiceStartupMode": "disabled", "xboxServicesLiveAuthManagerServiceStartupMode": "disabled", "xboxServicesLiveGameSaveServiceStartupMode": "disabled", "xboxServicesLiveNetworkingServiceStartupMode": "disabled", "bitLockerSystemDrivePolicy": { "encryptionMethod": null, "startupAuthenticationRequired": false, "startupAuthenticationBlockWithoutTpmChip": false, "startupAuthenticationTpmUsage": "blocked", "startupAuthenticationTpmPinUsage": "blocked", "startupAuthenticationTpmKeyUsage": "blocked", "startupAuthenticationTpmPinAndKeyUsage": "blocked", "minimumPinLength": null, "recoveryOptions": null, "prebootRecoveryEnableMessageAndUrl": false, "prebootRecoveryMessage": null, "prebootRecoveryUrl": null }, "bitLockerFixedDrivePolicy": { "encryptionMethod": null, "requireEncryptionForWriteAccess": false, "recoveryOptions": null }, "bitLockerRemovableDrivePolicy": { "encryptionMethod": null, "requireEncryptionForWriteAccess": false, "blockCrossOrganizationWriteAccess": false }, "firewallRules": [ ] }, "policyName": "Default Windows Endpoint Protection Policy", "policyType": "ConfigurationProfile" }