Turn on Memory Integrity via Intune

newtotechcom-J
Brass Contributor
Nov 08, 2023
Well, I also tried that before.
But it didn't turn on Memory integrity.
- rahuljindal
  Bronze Contributor
  Nov 09, 2023
  Did you restart the device? I recall that being a requirement.
  - newtotechcom-J
    Brass Contributor
    Nov 09, 2023
    rahuljindal
    
    Yes, I did.
    
    I have Memory Integrity turned ON for me.
    
    And these are the registry values for me:
    PS C:\WINDOWS\system32> Get-ItemProperty -Path Registry::\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity
    
    Enabled : 1
    HVCIMATRequired : 0
    Locked : 1
    PSPath : Microsoft.PowerShell.Core\Registry::\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity
    PSParentPath : Microsoft.PowerShell.Core\Registry::\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios
    PSChildName : HypervisorEnforcedCodeIntegrity
    PSProvider : Microsoft.PowerShell.Core\Registry
    
    And, this is the registry value for the user where it is not turned ON using my script:
    PS C:\Users\XX> Get-ItemProperty -Path Registry::\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity
    
    Enabled : 1
    PSPath : Microsoft.PowerShell.Core\Registry::\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity
    PSParentPath : Microsoft.PowerShell.Core\Registry::\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios
    PSChildName : HypervisorEnforcedCodeIntegrity
    PSProvider : Microsoft.PowerShell.Core\Registry
    
    How can I have the registry value same as me for the users where it is not turned ON.

Forum Discussion

Resources