![]() Repeat the above process for at least two models, but preferably for each model you have in your environment (or at least the top five mot used models). ![]() Set-HVCIOptions -Enabled -FilePath $CIPolicyfileXML #Now activating Hardware Virtualized Code Integrity (HVCI) and set it to enabled Set-RuleOption -FilePath $CIPolicyfileXML -Option 17 #Set this policy to allow supplemental policies, otherwise we can't supplement this basepolicy Set-RuleOption -FilePath $CIPolicyfileXML -Option 16 #Set the following option to make sure the policy can be applied without reboot Set-RuleOption -FilePath $CIPolicyfileXML -Option 14 #Automatically trust what Microsoft has deemed trustworthy using the Intelligent Security Graph We will start with auditing, and eventually in the end of this guide switch to enforced mode. Let’s start with creating a baseline policy from two different machines, which will later be merged to one baseline policy.
0 Comments
Leave a Reply. |