285 lines
19 KiB
JSON
285 lines
19 KiB
JSON
{
|
|
"policy": {
|
|
"@odata.context": "https://graph.microsoft.com/beta/$metadata#deviceManagement/deviceConfigurations/$entity",
|
|
"@odata.type": "#microsoft.graph.windows10EndpointProtectionConfiguration",
|
|
"id": "dcd1a686-d9b4-4662-8d86-3c4d6090bebb",
|
|
"lastModifiedDateTime": "2024-11-29T13:45:01.7005482Z",
|
|
"roleScopeTagIds": [
|
|
"0"
|
|
],
|
|
"supportsScopeTags": true,
|
|
"deviceManagementApplicabilityRuleOsEdition": null,
|
|
"deviceManagementApplicabilityRuleOsVersion": null,
|
|
"deviceManagementApplicabilityRuleDeviceMode": null,
|
|
"createdDateTime": "2023-06-23T09:32:52.489943Z",
|
|
"description": "Richtlinie konfugiert sicherreleve Einstellungen für Windows",
|
|
"displayName": "Default Windows Endpoint Protection Policy",
|
|
"version": 5,
|
|
"applicationGuardEnabled": false,
|
|
"applicationGuardEnabledOptions": "notConfigured",
|
|
"applicationGuardBlockFileTransfer": "notConfigured",
|
|
"applicationGuardBlockNonEnterpriseContent": false,
|
|
"applicationGuardAllowPersistence": false,
|
|
"applicationGuardForceAuditing": false,
|
|
"applicationGuardBlockClipboardSharing": "notConfigured",
|
|
"applicationGuardAllowPrintToPDF": false,
|
|
"applicationGuardAllowPrintToXPS": false,
|
|
"applicationGuardAllowPrintToLocalPrinters": false,
|
|
"applicationGuardAllowPrintToNetworkPrinters": false,
|
|
"applicationGuardAllowVirtualGPU": false,
|
|
"applicationGuardAllowFileSaveOnHost": false,
|
|
"applicationGuardAllowCameraMicrophoneRedirection": null,
|
|
"applicationGuardCertificateThumbprints": [
|
|
|
|
],
|
|
"appLockerApplicationControl": "notConfigured",
|
|
"bitLockerAllowStandardUserEncryption": false,
|
|
"bitLockerDisableWarningForOtherDiskEncryption": false,
|
|
"bitLockerEnableStorageCardEncryptionOnMobile": false,
|
|
"bitLockerEncryptDevice": false,
|
|
"bitLockerRecoveryPasswordRotation": "notConfigured",
|
|
"defenderSecurityCenterDisableAppBrowserUI": null,
|
|
"defenderSecurityCenterDisableFamilyUI": null,
|
|
"defenderSecurityCenterDisableHealthUI": null,
|
|
"defenderSecurityCenterDisableNetworkUI": null,
|
|
"defenderSecurityCenterDisableVirusUI": null,
|
|
"defenderSecurityCenterDisableAccountUI": null,
|
|
"defenderSecurityCenterDisableClearTpmUI": null,
|
|
"defenderSecurityCenterDisableHardwareUI": null,
|
|
"defenderSecurityCenterDisableNotificationAreaUI": null,
|
|
"defenderSecurityCenterDisableRansomwareUI": null,
|
|
"defenderSecurityCenterDisableSecureBootUI": null,
|
|
"defenderSecurityCenterDisableTroubleshootingUI": null,
|
|
"defenderSecurityCenterDisableVulnerableTpmFirmwareUpdateUI": null,
|
|
"defenderSecurityCenterOrganizationDisplayName": null,
|
|
"defenderSecurityCenterHelpEmail": null,
|
|
"defenderSecurityCenterHelpPhone": null,
|
|
"defenderSecurityCenterHelpURL": null,
|
|
"defenderSecurityCenterNotificationsFromApp": "notConfigured",
|
|
"defenderSecurityCenterITContactDisplay": "notConfigured",
|
|
"windowsDefenderTamperProtection": "notConfigured",
|
|
"defenderAdobeReaderLaunchChildProcess": "notConfigured",
|
|
"defenderAttackSurfaceReductionExcludedPaths": [
|
|
|
|
],
|
|
"defenderOfficeAppsOtherProcessInjectionType": "userDefined",
|
|
"defenderOfficeAppsOtherProcessInjection": "userDefined",
|
|
"defenderOfficeCommunicationAppsLaunchChildProcess": "notConfigured",
|
|
"defenderOfficeAppsExecutableContentCreationOrLaunchType": "userDefined",
|
|
"defenderOfficeAppsExecutableContentCreationOrLaunch": "userDefined",
|
|
"defenderOfficeAppsLaunchChildProcessType": "userDefined",
|
|
"defenderOfficeAppsLaunchChildProcess": "userDefined",
|
|
"defenderOfficeMacroCodeAllowWin32ImportsType": "userDefined",
|
|
"defenderOfficeMacroCodeAllowWin32Imports": "userDefined",
|
|
"defenderScriptObfuscatedMacroCodeType": "userDefined",
|
|
"defenderScriptObfuscatedMacroCode": "userDefined",
|
|
"defenderScriptDownloadedPayloadExecutionType": "userDefined",
|
|
"defenderScriptDownloadedPayloadExecution": "userDefined",
|
|
"defenderPreventCredentialStealingType": "notConfigured",
|
|
"defenderProcessCreationType": "userDefined",
|
|
"defenderProcessCreation": "userDefined",
|
|
"defenderUntrustedUSBProcessType": "userDefined",
|
|
"defenderUntrustedUSBProcess": "userDefined",
|
|
"defenderUntrustedExecutableType": "userDefined",
|
|
"defenderUntrustedExecutable": "userDefined",
|
|
"defenderEmailContentExecutionType": "userDefined",
|
|
"defenderEmailContentExecution": "userDefined",
|
|
"defenderAdvancedRansomewareProtectionType": "notConfigured",
|
|
"defenderGuardMyFoldersType": "userDefined",
|
|
"defenderGuardedFoldersAllowedAppPaths": [
|
|
|
|
],
|
|
"defenderAdditionalGuardedFolders": [
|
|
|
|
],
|
|
"defenderNetworkProtectionType": "notConfigured",
|
|
"defenderExploitProtectionXml": null,
|
|
"defenderExploitProtectionXmlFileName": null,
|
|
"defenderSecurityCenterBlockExploitProtectionOverride": false,
|
|
"defenderBlockPersistenceThroughWmiType": "userDefined",
|
|
"firewallBlockStatefulFTP": null,
|
|
"firewallIdleTimeoutForSecurityAssociationInSeconds": null,
|
|
"firewallPreSharedKeyEncodingMethod": "deviceDefault",
|
|
"firewallIPSecExemptionsNone": false,
|
|
"firewallIPSecExemptionsAllowNeighborDiscovery": false,
|
|
"firewallIPSecExemptionsAllowICMP": false,
|
|
"firewallIPSecExemptionsAllowRouterDiscovery": false,
|
|
"firewallIPSecExemptionsAllowDHCP": false,
|
|
"firewallCertificateRevocationListCheckMethod": "deviceDefault",
|
|
"firewallMergeKeyingModuleSettings": null,
|
|
"firewallPacketQueueingMethod": "deviceDefault",
|
|
"firewallProfileDomain": null,
|
|
"firewallProfilePublic": null,
|
|
"firewallProfilePrivate": null,
|
|
"localSecurityOptionsBlockMicrosoftAccounts": false,
|
|
"localSecurityOptionsBlockRemoteLogonWithBlankPassword": true,
|
|
"localSecurityOptionsDisableAdministratorAccount": false,
|
|
"localSecurityOptionsAdministratorAccountName": null,
|
|
"localSecurityOptionsDisableGuestAccount": true,
|
|
"localSecurityOptionsGuestAccountName": null,
|
|
"localSecurityOptionsAllowUndockWithoutHavingToLogon": false,
|
|
"localSecurityOptionsBlockUsersInstallingPrinterDrivers": true,
|
|
"localSecurityOptionsBlockRemoteOpticalDriveAccess": false,
|
|
"localSecurityOptionsFormatAndEjectOfRemovableMediaAllowedUser": "notConfigured",
|
|
"localSecurityOptionsMachineInactivityLimit": 5,
|
|
"localSecurityOptionsMachineInactivityLimitInMinutes": 5,
|
|
"localSecurityOptionsDoNotRequireCtrlAltDel": false,
|
|
"localSecurityOptionsHideLastSignedInUser": false,
|
|
"localSecurityOptionsHideUsernameAtSignIn": false,
|
|
"localSecurityOptionsLogOnMessageTitle": null,
|
|
"localSecurityOptionsLogOnMessageText": null,
|
|
"localSecurityOptionsAllowPKU2UAuthenticationRequests": false,
|
|
"localSecurityOptionsAllowRemoteCallsToSecurityAccountsManagerHelperBool": false,
|
|
"localSecurityOptionsAllowRemoteCallsToSecurityAccountsManager": null,
|
|
"localSecurityOptionsMinimumSessionSecurityForNtlmSspBasedClients": "none",
|
|
"localSecurityOptionsMinimumSessionSecurityForNtlmSspBasedServers": "none",
|
|
"lanManagerAuthenticationLevel": "lmNtlmV2AndNotLmOrNtm",
|
|
"lanManagerWorkstationDisableInsecureGuestLogons": false,
|
|
"localSecurityOptionsClearVirtualMemoryPageFile": false,
|
|
"localSecurityOptionsAllowSystemToBeShutDownWithoutHavingToLogOn": false,
|
|
"localSecurityOptionsAllowUIAccessApplicationElevation": false,
|
|
"localSecurityOptionsVirtualizeFileAndRegistryWriteFailuresToPerUserLocations": false,
|
|
"localSecurityOptionsOnlyElevateSignedExecutables": false,
|
|
"localSecurityOptionsAdministratorElevationPromptBehavior": "promptForConsent",
|
|
"localSecurityOptionsStandardUserElevationPromptBehavior": "promptForCredentialsOnTheSecureDesktop",
|
|
"localSecurityOptionsSwitchToSecureDesktopWhenPromptingForElevation": false,
|
|
"localSecurityOptionsDetectApplicationInstallationsAndPromptForElevation": false,
|
|
"localSecurityOptionsAllowUIAccessApplicationsForSecureLocations": false,
|
|
"localSecurityOptionsUseAdminApprovalMode": false,
|
|
"localSecurityOptionsUseAdminApprovalModeForAdministrators": false,
|
|
"localSecurityOptionsInformationShownOnLockScreen": "notConfigured",
|
|
"localSecurityOptionsInformationDisplayedOnLockScreen": "notConfigured",
|
|
"localSecurityOptionsDisableClientDigitallySignCommunicationsIfServerAgrees": false,
|
|
"localSecurityOptionsClientDigitallySignCommunicationsAlways": true,
|
|
"localSecurityOptionsClientSendUnencryptedPasswordToThirdPartySMBServers": false,
|
|
"localSecurityOptionsDisableServerDigitallySignCommunicationsAlways": true,
|
|
"localSecurityOptionsDisableServerDigitallySignCommunicationsIfClientAgrees": true,
|
|
"localSecurityOptionsRestrictAnonymousAccessToNamedPipesAndShares": false,
|
|
"localSecurityOptionsDoNotAllowAnonymousEnumerationOfSAMAccounts": true,
|
|
"localSecurityOptionsAllowAnonymousEnumerationOfSAMAccountsAndShares": true,
|
|
"localSecurityOptionsDoNotStoreLANManagerHashValueOnNextPasswordChange": false,
|
|
"localSecurityOptionsSmartCardRemovalBehavior": "noAction",
|
|
"deviceGuardLocalSystemAuthorityCredentialGuardSettings": "enableWithUEFILock",
|
|
"deviceGuardEnableVirtualizationBasedSecurity": true,
|
|
"deviceGuardEnableSecureBootWithDMA": true,
|
|
"deviceGuardSecureBootWithDMA": "notConfigured",
|
|
"deviceGuardLaunchSystemGuard": "notConfigured",
|
|
"defenderDisableScanArchiveFiles": null,
|
|
"defenderAllowScanArchiveFiles": null,
|
|
"defenderDisableBehaviorMonitoring": null,
|
|
"defenderAllowBehaviorMonitoring": null,
|
|
"defenderDisableCloudProtection": null,
|
|
"defenderAllowCloudProtection": null,
|
|
"defenderEnableScanIncomingMail": null,
|
|
"defenderEnableScanMappedNetworkDrivesDuringFullScan": null,
|
|
"defenderDisableScanRemovableDrivesDuringFullScan": null,
|
|
"defenderAllowScanRemovableDrivesDuringFullScan": null,
|
|
"defenderDisableScanDownloads": null,
|
|
"defenderAllowScanDownloads": null,
|
|
"defenderDisableIntrusionPreventionSystem": null,
|
|
"defenderAllowIntrusionPreventionSystem": null,
|
|
"defenderDisableOnAccessProtection": null,
|
|
"defenderAllowOnAccessProtection": null,
|
|
"defenderDisableRealTimeMonitoring": null,
|
|
"defenderAllowRealTimeMonitoring": null,
|
|
"defenderDisableScanNetworkFiles": null,
|
|
"defenderAllowScanNetworkFiles": null,
|
|
"defenderDisableScanScriptsLoadedInInternetExplorer": null,
|
|
"defenderAllowScanScriptsLoadedInInternetExplorer": null,
|
|
"defenderBlockEndUserAccess": null,
|
|
"defenderAllowEndUserAccess": null,
|
|
"defenderScanMaxCpuPercentage": null,
|
|
"defenderCheckForSignaturesBeforeRunningScan": null,
|
|
"defenderCloudBlockLevel": null,
|
|
"defenderCloudExtendedTimeoutInSeconds": null,
|
|
"defenderDaysBeforeDeletingQuarantinedMalware": null,
|
|
"defenderDisableCatchupFullScan": null,
|
|
"defenderDisableCatchupQuickScan": null,
|
|
"defenderEnableLowCpuPriority": null,
|
|
"defenderFileExtensionsToExclude": [
|
|
|
|
],
|
|
"defenderFilesAndFoldersToExclude": [
|
|
|
|
],
|
|
"defenderProcessesToExclude": [
|
|
|
|
],
|
|
"defenderPotentiallyUnwantedAppAction": null,
|
|
"defenderScanDirection": null,
|
|
"defenderScanType": null,
|
|
"defenderScheduledQuickScanTime": null,
|
|
"defenderScheduledScanDay": null,
|
|
"defenderScheduledScanTime": null,
|
|
"defenderSignatureUpdateIntervalInHours": null,
|
|
"defenderSubmitSamplesConsentType": null,
|
|
"defenderDetectedMalwareActions": null,
|
|
"dmaGuardDeviceEnumerationPolicy": "deviceDefault",
|
|
"smartScreenEnableInShell": true,
|
|
"smartScreenBlockOverrideForFiles": true,
|
|
"userRightsAccessCredentialManagerAsTrustedCaller": null,
|
|
"userRightsAllowAccessFromNetwork": null,
|
|
"userRightsBlockAccessFromNetwork": null,
|
|
"userRightsActAsPartOfTheOperatingSystem": null,
|
|
"userRightsLocalLogOn": null,
|
|
"userRightsDenyLocalLogOn": null,
|
|
"userRightsBackupData": null,
|
|
"userRightsChangeSystemTime": null,
|
|
"userRightsCreateGlobalObjects": null,
|
|
"userRightsCreatePageFile": null,
|
|
"userRightsCreatePermanentSharedObjects": null,
|
|
"userRightsCreateSymbolicLinks": null,
|
|
"userRightsCreateToken": null,
|
|
"userRightsDebugPrograms": null,
|
|
"userRightsRemoteDesktopServicesLogOn": null,
|
|
"userRightsDelegation": null,
|
|
"userRightsGenerateSecurityAudits": null,
|
|
"userRightsImpersonateClient": null,
|
|
"userRightsIncreaseSchedulingPriority": null,
|
|
"userRightsLoadUnloadDrivers": null,
|
|
"userRightsLockMemory": null,
|
|
"userRightsManageAuditingAndSecurityLogs": null,
|
|
"userRightsManageVolumes": null,
|
|
"userRightsModifyFirmwareEnvironment": null,
|
|
"userRightsModifyObjectLabels": null,
|
|
"userRightsProfileSingleProcess": null,
|
|
"userRightsRemoteShutdown": null,
|
|
"userRightsRestoreData": null,
|
|
"userRightsTakeOwnership": null,
|
|
"xboxServicesEnableXboxGameSaveTask": false,
|
|
"xboxServicesAccessoryManagementServiceStartupMode": "disabled",
|
|
"xboxServicesLiveAuthManagerServiceStartupMode": "disabled",
|
|
"xboxServicesLiveGameSaveServiceStartupMode": "disabled",
|
|
"xboxServicesLiveNetworkingServiceStartupMode": "disabled",
|
|
"bitLockerSystemDrivePolicy": {
|
|
"encryptionMethod": null,
|
|
"startupAuthenticationRequired": false,
|
|
"startupAuthenticationBlockWithoutTpmChip": false,
|
|
"startupAuthenticationTpmUsage": "blocked",
|
|
"startupAuthenticationTpmPinUsage": "blocked",
|
|
"startupAuthenticationTpmKeyUsage": "blocked",
|
|
"startupAuthenticationTpmPinAndKeyUsage": "blocked",
|
|
"minimumPinLength": null,
|
|
"recoveryOptions": null,
|
|
"prebootRecoveryEnableMessageAndUrl": false,
|
|
"prebootRecoveryMessage": null,
|
|
"prebootRecoveryUrl": null
|
|
},
|
|
"bitLockerFixedDrivePolicy": {
|
|
"encryptionMethod": null,
|
|
"requireEncryptionForWriteAccess": false,
|
|
"recoveryOptions": null
|
|
},
|
|
"bitLockerRemovableDrivePolicy": {
|
|
"encryptionMethod": null,
|
|
"requireEncryptionForWriteAccess": false,
|
|
"blockCrossOrganizationWriteAccess": false
|
|
},
|
|
"firewallRules": [
|
|
|
|
]
|
|
},
|
|
"policyName": "Default Windows Endpoint Protection Policy",
|
|
"policyType": "ConfigurationProfile"
|
|
}
|