{ "policy": { "@odata.context": "https://graph.microsoft.com/beta/$metadata#deviceManagement/deviceConfigurations/$entity", "@odata.type": "#microsoft.graph.windows10EndpointProtectionConfiguration", "applicationGuardAllowCameraMicrophoneRedirection": null, "applicationGuardAllowFileSaveOnHost": false, "applicationGuardAllowPersistence": false, "applicationGuardAllowPrintToLocalPrinters": false, "applicationGuardAllowPrintToNetworkPrinters": false, "applicationGuardAllowPrintToPDF": false, "applicationGuardAllowPrintToXPS": false, "applicationGuardAllowVirtualGPU": false, "applicationGuardBlockClipboardSharing": "notConfigured", "applicationGuardBlockFileTransfer": "notConfigured", "applicationGuardBlockNonEnterpriseContent": false, "applicationGuardCertificateThumbprints": null, "applicationGuardEnabled": false, "applicationGuardEnabledOptions": "notConfigured", "applicationGuardForceAuditing": false, "appLockerApplicationControl": "notConfigured", "bitLockerAllowStandardUserEncryption": false, "bitLockerDisableWarningForOtherDiskEncryption": false, "bitLockerEnableStorageCardEncryptionOnMobile": false, "bitLockerEncryptDevice": false, "bitLockerFixedDrivePolicy": { "encryptionMethod": null, "recoveryOptions": null, "requireEncryptionForWriteAccess": false }, "bitLockerRecoveryPasswordRotation": "notConfigured", "bitLockerRemovableDrivePolicy": { "blockCrossOrganizationWriteAccess": false, "encryptionMethod": null, "requireEncryptionForWriteAccess": false }, "bitLockerSystemDrivePolicy": { "encryptionMethod": null, "minimumPinLength": null, "prebootRecoveryEnableMessageAndUrl": false, "prebootRecoveryMessage": null, "prebootRecoveryUrl": null, "recoveryOptions": null, "startupAuthenticationBlockWithoutTpmChip": false, "startupAuthenticationRequired": false, "startupAuthenticationTpmKeyUsage": "blocked", "startupAuthenticationTpmPinAndKeyUsage": "blocked", "startupAuthenticationTpmPinUsage": "blocked", "startupAuthenticationTpmUsage": "blocked" }, "createdDateTime": "\/Date(1687512772489)\/", "defenderAdditionalGuardedFolders": null, "defenderAdobeReaderLaunchChildProcess": "notConfigured", "defenderAdvancedRansomewareProtectionType": "notConfigured", "defenderAllowBehaviorMonitoring": null, "defenderAllowCloudProtection": null, "defenderAllowEndUserAccess": null, "defenderAllowIntrusionPreventionSystem": null, "defenderAllowOnAccessProtection": null, "defenderAllowRealTimeMonitoring": null, "defenderAllowScanArchiveFiles": null, "defenderAllowScanDownloads": null, "defenderAllowScanNetworkFiles": null, "defenderAllowScanRemovableDrivesDuringFullScan": null, "defenderAllowScanScriptsLoadedInInternetExplorer": null, "defenderAttackSurfaceReductionExcludedPaths": null, "defenderBlockEndUserAccess": null, "defenderBlockPersistenceThroughWmiType": "userDefined", "defenderCheckForSignaturesBeforeRunningScan": null, "defenderCloudBlockLevel": null, "defenderCloudExtendedTimeoutInSeconds": null, "defenderDaysBeforeDeletingQuarantinedMalware": null, "defenderDetectedMalwareActions": null, "defenderDisableBehaviorMonitoring": null, "defenderDisableCatchupFullScan": null, "defenderDisableCatchupQuickScan": null, "defenderDisableCloudProtection": null, "defenderDisableIntrusionPreventionSystem": null, "defenderDisableOnAccessProtection": null, "defenderDisableRealTimeMonitoring": null, "defenderDisableScanArchiveFiles": null, "defenderDisableScanDownloads": null, "defenderDisableScanNetworkFiles": null, "defenderDisableScanRemovableDrivesDuringFullScan": null, "defenderDisableScanScriptsLoadedInInternetExplorer": null, "defenderEmailContentExecution": "userDefined", "defenderEmailContentExecutionType": "userDefined", "defenderEnableLowCpuPriority": null, "defenderEnableScanIncomingMail": null, "defenderEnableScanMappedNetworkDrivesDuringFullScan": null, "defenderExploitProtectionXml": null, "defenderExploitProtectionXmlFileName": null, "defenderFileExtensionsToExclude": null, "defenderFilesAndFoldersToExclude": null, "defenderGuardedFoldersAllowedAppPaths": null, "defenderGuardMyFoldersType": "userDefined", "defenderNetworkProtectionType": "notConfigured", "defenderOfficeAppsExecutableContentCreationOrLaunch": "userDefined", "defenderOfficeAppsExecutableContentCreationOrLaunchType": "userDefined", "defenderOfficeAppsLaunchChildProcess": "userDefined", "defenderOfficeAppsLaunchChildProcessType": "userDefined", "defenderOfficeAppsOtherProcessInjection": "userDefined", "defenderOfficeAppsOtherProcessInjectionType": "userDefined", "defenderOfficeCommunicationAppsLaunchChildProcess": "notConfigured", "defenderOfficeMacroCodeAllowWin32Imports": "userDefined", "defenderOfficeMacroCodeAllowWin32ImportsType": "userDefined", "defenderPotentiallyUnwantedAppAction": null, "defenderPreventCredentialStealingType": "notConfigured", "defenderProcessCreation": "userDefined", "defenderProcessCreationType": "userDefined", "defenderProcessesToExclude": null, "defenderScanDirection": null, "defenderScanMaxCpuPercentage": null, "defenderScanType": null, "defenderScheduledQuickScanTime": null, "defenderScheduledScanDay": null, "defenderScheduledScanTime": null, "defenderScriptDownloadedPayloadExecution": "userDefined", "defenderScriptDownloadedPayloadExecutionType": "userDefined", "defenderScriptObfuscatedMacroCode": "userDefined", "defenderScriptObfuscatedMacroCodeType": "userDefined", "defenderSecurityCenterBlockExploitProtectionOverride": false, "defenderSecurityCenterDisableAccountUI": null, "defenderSecurityCenterDisableAppBrowserUI": null, "defenderSecurityCenterDisableClearTpmUI": null, "defenderSecurityCenterDisableFamilyUI": null, "defenderSecurityCenterDisableHardwareUI": null, "defenderSecurityCenterDisableHealthUI": null, "defenderSecurityCenterDisableNetworkUI": null, "defenderSecurityCenterDisableNotificationAreaUI": null, "defenderSecurityCenterDisableRansomwareUI": null, "defenderSecurityCenterDisableSecureBootUI": null, "defenderSecurityCenterDisableTroubleshootingUI": null, "defenderSecurityCenterDisableVirusUI": null, "defenderSecurityCenterDisableVulnerableTpmFirmwareUpdateUI": null, "defenderSecurityCenterHelpEmail": null, "defenderSecurityCenterHelpPhone": null, "defenderSecurityCenterHelpURL": null, "defenderSecurityCenterITContactDisplay": "notConfigured", "defenderSecurityCenterNotificationsFromApp": "notConfigured", "defenderSecurityCenterOrganizationDisplayName": null, "defenderSignatureUpdateIntervalInHours": null, "defenderSubmitSamplesConsentType": null, "defenderUntrustedExecutable": "userDefined", "defenderUntrustedExecutableType": "userDefined", "defenderUntrustedUSBProcess": "userDefined", "defenderUntrustedUSBProcessType": "userDefined", "description": "Richtlinie konfugiert sicherreleve Einstellungen für Windows", "deviceGuardEnableSecureBootWithDMA": true, "deviceGuardEnableVirtualizationBasedSecurity": true, "deviceGuardLaunchSystemGuard": "notConfigured", "deviceGuardLocalSystemAuthorityCredentialGuardSettings": "enableWithUEFILock", "deviceGuardSecureBootWithDMA": "notConfigured", "deviceManagementApplicabilityRuleDeviceMode": null, "deviceManagementApplicabilityRuleOsEdition": null, "deviceManagementApplicabilityRuleOsVersion": null, "displayName": "Default Windows Endpoint Protection Policy", "dmaGuardDeviceEnumerationPolicy": "deviceDefault", "firewallBlockStatefulFTP": null, "firewallCertificateRevocationListCheckMethod": "deviceDefault", "firewallIdleTimeoutForSecurityAssociationInSeconds": null, "firewallIPSecExemptionsAllowDHCP": false, "firewallIPSecExemptionsAllowICMP": false, "firewallIPSecExemptionsAllowNeighborDiscovery": false, "firewallIPSecExemptionsAllowRouterDiscovery": false, "firewallIPSecExemptionsNone": false, "firewallMergeKeyingModuleSettings": null, "firewallPacketQueueingMethod": "deviceDefault", "firewallPreSharedKeyEncodingMethod": "deviceDefault", "firewallProfileDomain": null, "firewallProfilePrivate": null, "firewallProfilePublic": null, "firewallRules": null, "id": "dcd1a686-d9b4-4662-8d86-3c4d6090bebb", "lanManagerAuthenticationLevel": "lmNtlmV2AndNotLmOrNtm", "lanManagerWorkstationDisableInsecureGuestLogons": false, "lastModifiedDateTime": "\/Date(1732887901700)\/", "localSecurityOptionsAdministratorAccountName": null, "localSecurityOptionsAdministratorElevationPromptBehavior": "promptForConsent", "localSecurityOptionsAllowAnonymousEnumerationOfSAMAccountsAndShares": true, "localSecurityOptionsAllowPKU2UAuthenticationRequests": false, "localSecurityOptionsAllowRemoteCallsToSecurityAccountsManager": null, "localSecurityOptionsAllowRemoteCallsToSecurityAccountsManagerHelperBool": false, "localSecurityOptionsAllowSystemToBeShutDownWithoutHavingToLogOn": false, "localSecurityOptionsAllowUIAccessApplicationElevation": false, "localSecurityOptionsAllowUIAccessApplicationsForSecureLocations": false, "localSecurityOptionsAllowUndockWithoutHavingToLogon": false, "localSecurityOptionsBlockMicrosoftAccounts": false, "localSecurityOptionsBlockRemoteLogonWithBlankPassword": true, "localSecurityOptionsBlockRemoteOpticalDriveAccess": false, "localSecurityOptionsBlockUsersInstallingPrinterDrivers": true, "localSecurityOptionsClearVirtualMemoryPageFile": false, "localSecurityOptionsClientDigitallySignCommunicationsAlways": true, "localSecurityOptionsClientSendUnencryptedPasswordToThirdPartySMBServers": false, "localSecurityOptionsDetectApplicationInstallationsAndPromptForElevation": false, "localSecurityOptionsDisableAdministratorAccount": false, "localSecurityOptionsDisableClientDigitallySignCommunicationsIfServerAgrees": false, "localSecurityOptionsDisableGuestAccount": true, "localSecurityOptionsDisableServerDigitallySignCommunicationsAlways": true, "localSecurityOptionsDisableServerDigitallySignCommunicationsIfClientAgrees": true, "localSecurityOptionsDoNotAllowAnonymousEnumerationOfSAMAccounts": true, "localSecurityOptionsDoNotRequireCtrlAltDel": false, "localSecurityOptionsDoNotStoreLANManagerHashValueOnNextPasswordChange": false, "localSecurityOptionsFormatAndEjectOfRemovableMediaAllowedUser": "notConfigured", "localSecurityOptionsGuestAccountName": null, "localSecurityOptionsHideLastSignedInUser": false, "localSecurityOptionsHideUsernameAtSignIn": false, "localSecurityOptionsInformationDisplayedOnLockScreen": "notConfigured", "localSecurityOptionsInformationShownOnLockScreen": "notConfigured", "localSecurityOptionsLogOnMessageText": null, "localSecurityOptionsLogOnMessageTitle": null, "localSecurityOptionsMachineInactivityLimit": 5, "localSecurityOptionsMachineInactivityLimitInMinutes": 5, "localSecurityOptionsMinimumSessionSecurityForNtlmSspBasedClients": "none", "localSecurityOptionsMinimumSessionSecurityForNtlmSspBasedServers": "none", "localSecurityOptionsOnlyElevateSignedExecutables": false, "localSecurityOptionsRestrictAnonymousAccessToNamedPipesAndShares": false, "localSecurityOptionsSmartCardRemovalBehavior": "noAction", "localSecurityOptionsStandardUserElevationPromptBehavior": "promptForCredentialsOnTheSecureDesktop", "localSecurityOptionsSwitchToSecureDesktopWhenPromptingForElevation": false, "localSecurityOptionsUseAdminApprovalMode": false, "localSecurityOptionsUseAdminApprovalModeForAdministrators": false, "localSecurityOptionsVirtualizeFileAndRegistryWriteFailuresToPerUserLocations": false, "roleScopeTagIds": "0", "smartScreenBlockOverrideForFiles": true, "smartScreenEnableInShell": true, "supportsScopeTags": true, "userRightsAccessCredentialManagerAsTrustedCaller": null, "userRightsActAsPartOfTheOperatingSystem": null, "userRightsAllowAccessFromNetwork": null, "userRightsBackupData": null, "userRightsBlockAccessFromNetwork": null, "userRightsChangeSystemTime": null, "userRightsCreateGlobalObjects": null, "userRightsCreatePageFile": null, "userRightsCreatePermanentSharedObjects": null, "userRightsCreateSymbolicLinks": null, "userRightsCreateToken": null, "userRightsDebugPrograms": null, "userRightsDelegation": null, "userRightsDenyLocalLogOn": null, "userRightsGenerateSecurityAudits": null, "userRightsImpersonateClient": null, "userRightsIncreaseSchedulingPriority": null, "userRightsLoadUnloadDrivers": null, "userRightsLocalLogOn": null, "userRightsLockMemory": null, "userRightsManageAuditingAndSecurityLogs": null, "userRightsManageVolumes": null, "userRightsModifyFirmwareEnvironment": null, "userRightsModifyObjectLabels": null, "userRightsProfileSingleProcess": null, "userRightsRemoteDesktopServicesLogOn": null, "userRightsRemoteShutdown": null, "userRightsRestoreData": null, "userRightsTakeOwnership": null, "version": 5, "windowsDefenderTamperProtection": "notConfigured", "xboxServicesAccessoryManagementServiceStartupMode": "disabled", "xboxServicesEnableXboxGameSaveTask": false, "xboxServicesLiveAuthManagerServiceStartupMode": "disabled", "xboxServicesLiveGameSaveServiceStartupMode": "disabled", "xboxServicesLiveNetworkingServiceStartupMode": "disabled" }, "policyName": "Default Windows Endpoint Protection Policy", "policyType": "ConfigurationProfile" }