Event details

Explore the ins and outs of two security features enabled by default in Windows 11, version 22H2: Windows Defender Credential Guard and LSA protection. Explore the criteria for enablement, security b...
Heather_Poulsen
Updated Dec 27, 2024
Technical Takeoff
SeMeDe's avatar
SeMeDe
Iron Contributor
Oct 21, 2022

Hello everybody,

really looking forward for this technical after-ignite intune event! 🙂

 

One question, what a little bit confussed me at ignite.

In https://ignite.microsoft.com/de-DE/sessions/2c334d3c-0886-4b98-8f02-ee0c8e4691d3 at around 3:03 

https://ignite.microsoft.com/de-DE/speakers/c465abd3-62b4-4fe0-ac8d-be0746a67665?source=/sessions/2c334d3c-0886-4b98-8f02-ee0c8e4691d3 speaks about Secured-core PC (Advanced security enabled by default) and/or Pluton (OS hardware root-of-trust) and it was not clear to me what was meant with it.
 
I hope because of the title of this session "Default hardening in Windows 11, version 22H2" I hope I will have a clearer view of what is meant by Secured-core PC.
 
Thanks in advance.
Matthew_Palko's avatar
Matthew_Palko
Icon for Microsoft rankMicrosoft
Oct 24, 2022
Hi Sebastian, Secure-core PCs are required to have a set of security features enabled by default by the OEM. Not all of these features are default enabled in the OS. For more information on the features included as a part of secure core see: https://learn.microsoft.com/en-us/windows-hardware/design/device-experiences/oem-highly-secure-11 Credential Guard and LSA protection, which are in this talk are not included as a part of secure core at this time.