Event details

Explore the ins and outs of two security features enabled by default in Windows 11, version 22H2: Windows Defender Credential Guard and LSA protection. Explore the criteria for enablement, security b...
Heather_Poulsen
Updated Dec 27, 2024
Technical Takeoff
Greg_C_Gilbert's avatar
Greg_C_Gilbert
Iron Contributor
Oct 24, 2022
Is there a recommended method for creating filters in Intune or collections in ConfigMgr that can contain only PCs that include all the hardware requirements for enabling HVCI? I got bit several years ago where we enabled HVCI with UEFI lock on many PCs that didn't support it and it caused severe performance issues.
  • jirenugo's avatar
    jirenugo
    Icon for Microsoft rankMicrosoft
    Oct 24, 2022

    We don't have any recommendations right now. Thanks for the feedback! We will look into documenting the hardware requirements or providing a scripted mechanism to identify devices that can support VBS features. This is a good place to start Virtualization-based Security (VBS) | Microsoft Learn

  • Greg_C_Gilbert's avatar
    Greg_C_Gilbert
    Iron Contributor
    Oct 24, 2022
    Follow-up. Is there a way for companies to implement these settings in a scripted way that does the same checks that a fresh install of W11 22H2 does? It would be great if the product team could provide that.