Forum Discussion

Copper Contributor

Jun 21, 2017

Solved

Credential Guard

I am using the DG_Readiness PowerShell script to enable Credential Guard. The results say it is enabled and running with "Audit Mode" in parenthesis. What does this mean?

Michiko Short
Jun 21, 2017
Also https://docs.microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-manage has the latest information.

Michiko Short

Microsoft

Jun 21, 2017

That probably refers to another part of Device Guard rather than Credential Guard. Credential Guard does not support an audit mode.

Michiko Short

Microsoft

Jun 21, 2017

Also https://docs.microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-manage has the latest information.

MichaelMartin
Copper Contributor
Jun 21, 2017
When I use the PowerShell script to enable Credential Guard, then go to GPEdit to view the policy, it is not enabled. Is that by design? I'm still protected, right?
- Michiko Short
  Microsoft
  Jun 21, 2017
  Due to the HW & feature requirements, registry keys can be set and Credential Guard is not running. Group policy is used for configuration but not validation.