MD-101-Manage and protect devices Summary

Version vom 8. November 2019, 04:28 Uhr von Rladmin (Diskussion | Beiträge)

(Unterschied) ← Nächstältere Version | Aktuelle Version (Unterschied) | Nächstjüngere Version → (Unterschied)

Windows Defender features are managed through pwershell, gpos or intune
- Windows Defender Credential Guard requires Windows 10 Enterprise or Education and TPM and virtualization has to be enabled
- Windows Defender Exploit Guard
  - Exploit Protection
  - Attack Surface Reduction Rules
  - Network Protection
  - Controlled Folder Access
- Windows Defender Application Guard
  - requirements like Credential Guard
  - new browser windows in virtualized sandboxes
- Windows Defender Application Control to determine which apps are safe to run in the organization
- Threat Agent Status for monitoring Defender on enrolled devices
Ways to enroll Windows devices
- Add a work or school account
- Enroll in MDM only (user-driven)
  - Android and iOS devices can be enrolled by downloading the Company Portal app from the app store and signing in with the organsation account
- Enroll in MDM only (Device Enrollment Manager)
- Azure AD Join during OOBE
- Azure AD Join using Windows Autopilot
  - Autopilot can be configured to be user-driven or self-deploying
- Azure AD Join using bulk enrollment
Windows Analytics and Log Analytics require an Azure subscription

Abgerufen von „https://wiki.lehmann.systems/index.php?title=MD-101-Manage_and_protect_devices_Summary&oldid=175“

MD-101