Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1005391" data-attributes="member: 32260">There are some new options:<ul>
<li data-xf-list-type="ul">Developer Mode Dynamic Code Trust</li>
<li data-xf-list-type="ul">Conditional Windows Lockdown Policy</li>
</ul>The first should probably trust all DLLs included in the installer if the installer is allowed by SAC.The second is only supported on Windows 11 2022 update and was also used in Windows &quot;S&quot;:There are also some settings new for me:[CODE]&nbsp; &nbsp; &lt;Setting Provider=&quot;PolicyInfo&quot; Key=&quot;NoRevalidationUponRefresh&quot; ValueName=&quot;NoRevalidationUponRefreshValue&quot;&gt;&nbsp; &nbsp; &nbsp; &lt;Value&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;Boolean&gt;true&lt;/Boolean&gt;&nbsp; &nbsp; &nbsp; &lt;/Value&gt;&nbsp; &nbsp; &lt;/Setting&gt;&nbsp; &nbsp; &lt;Setting Provider=&quot;Microsoft&quot; Key=&quot;WindowsLockdownPolicySettings&quot; ValueName=&quot;ShellSmartscreenSuppressed&quot;&gt;&nbsp; &nbsp; &nbsp; &lt;Value&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;Boolean&gt;true&lt;/Boolean&gt;&nbsp; &nbsp; &nbsp; &lt;/Value&gt;&nbsp; &nbsp; &lt;/Setting&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;Setting Provider=&quot;Microsoft&quot; Key=&quot;WindowsLockdownPolicySettings&quot; ValueName=&quot;BrowserSmartscreenSuppressed&quot;&gt;&nbsp; &nbsp; &nbsp; &lt;Value&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;Boolean&gt;true&lt;/Boolean&gt;&nbsp; &nbsp; &nbsp; &lt;/Value&gt;&nbsp; &nbsp; &lt;/Setting&gt;&nbsp; &nbsp; &lt;Setting Provider=&quot;Microsoft&quot; Key=&quot;WindowsLockdownPolicySettings&quot; ValueName=&quot;ISGSmartscreenTrustSuppressed&quot;&gt;&nbsp; &nbsp; &nbsp; &lt;Value&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;Boolean&gt;true&lt;/Boolean&gt;&nbsp; &nbsp; &nbsp; &lt;/Value&gt;&nbsp; &nbsp; &lt;/Setting&gt;&nbsp; &nbsp; &lt;Setting Provider=&quot;Microsoft&quot; Key=&quot;WindowsLockdownPolicySettings&quot; ValueName=&quot;VerifiedAndReputableUI&quot;&gt;&nbsp; &nbsp; &nbsp; &lt;Value&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;Boolean&gt;true&lt;/Boolean&gt;&nbsp; &nbsp; &nbsp; &lt;/Value&gt;&nbsp; &nbsp; &lt;/Setting&gt;&nbsp; &nbsp; &lt;Setting Provider=&quot;Microsoft&quot; Key=&quot;WindowsLockdownPolicySettings&quot; ValueName=&quot;WindowsLockdownOfficeExtensions&quot;&gt;&nbsp; &nbsp; &nbsp; &lt;Value&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;Boolean&gt;true&lt;/Boolean&gt;&nbsp; &nbsp; &nbsp; &lt;/Value&gt;&nbsp; &nbsp; &lt;/Setting&gt;&nbsp; &nbsp; &lt;Setting Provider=&quot;Microsoft&quot; Key=&quot;WindowsLockdownPolicySettings&quot; ValueName=&quot;VerifiedAndReputablePerfMode&quot;&gt;&nbsp; &nbsp; &nbsp; &lt;Value&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;Boolean&gt;true&lt;/Boolean&gt;&nbsp; &nbsp; &nbsp; &lt;/Value&gt;&nbsp; &nbsp; &lt;/Setting&gt;&nbsp; &nbsp; &lt;Setting Provider=&quot;Microsoft&quot; Key=&quot;WindowsLockdownPolicySettings&quot; ValueName=&quot;VerifiedAndReputableTrustMode&quot;&gt;&nbsp; &nbsp; &nbsp; &lt;Value&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;Boolean&gt;true&lt;/Boolean&gt;&nbsp; &nbsp; &nbsp; &lt;/Value&gt;&nbsp; &nbsp; &lt;/Setting&gt;&nbsp; &nbsp; &lt;Setting Provider=&quot;Microsoft&quot; Key=&quot;WindowsLockdownPolicySettings&quot; ValueName=&quot;WindowsLockdownDangerousExtensionValidation&quot;&gt;&nbsp; &nbsp; &nbsp; &lt;Value&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;Boolean&gt;true&lt;/Boolean&gt;&nbsp; &nbsp; &nbsp; &lt;/Value&gt;&nbsp; &nbsp; &lt;/Setting&gt;&nbsp; &nbsp; &lt;Setting Provider=&quot;Microsoft&quot; Key=&quot;WindowsLockdownPolicySettings&quot; ValueName=&quot;WindowsLockdownDangerousExtensionEnforcement&quot;&gt;&nbsp; &nbsp; &nbsp; &lt;Value&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;Boolean&gt;true&lt;/Boolean&gt;&nbsp; &nbsp; &nbsp; &lt;/Value&gt;&nbsp; &nbsp; &lt;/Setting&gt;&nbsp; &nbsp; &lt;Setting Provider=&quot;Microsoft&quot; Key=&quot;WindowsLockdownPolicySettings&quot; ValueName=&quot;DisableMshtmlUmci&quot;&gt;&nbsp; &nbsp; &nbsp; &lt;Value&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;Boolean&gt;true&lt;/Boolean&gt;&nbsp; &nbsp; &nbsp; &lt;/Value&gt;&nbsp; &nbsp; &lt;/Setting&gt;&nbsp; &nbsp; &lt;Setting Provider=&quot;Microsoft&quot; Key=&quot;WindowsLockdownPolicySettings&quot; ValueName=&quot;VerifiedAndReputableAllowAntiMalware&quot;&gt;&nbsp; &nbsp; &nbsp; &lt;Value&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;Boolean&gt;true&lt;/Boolean&gt;&nbsp; &nbsp; &nbsp; &lt;/Value&gt;[/CODE]These settings are related to SmartScreen, MS Office, MSHTML, and dangerous extensions.</blockquote>

[QUOTE="Andy Ful, post: 1005391, member: 32260"] There are some new options: [LIST] [*]Developer Mode Dynamic Code Trust [*]Conditional Windows Lockdown Policy [/LIST] The first should probably trust all DLLs included in the installer if the installer is allowed by SAC. The second is only supported on Windows 11 2022 update and was also used in Windows "S": There are also some settings new for me: [CODE] <Setting Provider="PolicyInfo" Key="NoRevalidationUponRefresh" ValueName="NoRevalidationUponRefreshValue"> <Value> <Boolean>true</Boolean> </Value> </Setting> <Setting Provider="Microsoft" Key="WindowsLockdownPolicySettings" ValueName="ShellSmartscreenSuppressed"> <Value> <Boolean>true</Boolean> </Value> </Setting> <Setting Provider="Microsoft" Key="WindowsLockdownPolicySettings" ValueName="BrowserSmartscreenSuppressed"> <Value> <Boolean>true</Boolean> </Value> </Setting> <Setting Provider="Microsoft" Key="WindowsLockdownPolicySettings" ValueName="ISGSmartscreenTrustSuppressed"> <Value> <Boolean>true</Boolean> </Value> </Setting> <Setting Provider="Microsoft" Key="WindowsLockdownPolicySettings" ValueName="VerifiedAndReputableUI"> <Value> <Boolean>true</Boolean> </Value> </Setting> <Setting Provider="Microsoft" Key="WindowsLockdownPolicySettings" ValueName="WindowsLockdownOfficeExtensions"> <Value> <Boolean>true</Boolean> </Value> </Setting> <Setting Provider="Microsoft" Key="WindowsLockdownPolicySettings" ValueName="VerifiedAndReputablePerfMode"> <Value> <Boolean>true</Boolean> </Value> </Setting> <Setting Provider="Microsoft" Key="WindowsLockdownPolicySettings" ValueName="VerifiedAndReputableTrustMode"> <Value> <Boolean>true</Boolean> </Value> </Setting> <Setting Provider="Microsoft" Key="WindowsLockdownPolicySettings" ValueName="WindowsLockdownDangerousExtensionValidation"> <Value> <Boolean>true</Boolean> </Value> </Setting> <Setting Provider="Microsoft" Key="WindowsLockdownPolicySettings" ValueName="WindowsLockdownDangerousExtensionEnforcement"> <Value> <Boolean>true</Boolean> </Value> </Setting> <Setting Provider="Microsoft" Key="WindowsLockdownPolicySettings" ValueName="DisableMshtmlUmci"> <Value> <Boolean>true</Boolean> </Value> </Setting> <Setting Provider="Microsoft" Key="WindowsLockdownPolicySettings" ValueName="VerifiedAndReputableAllowAntiMalware"> <Value> <Boolean>true</Boolean> </Value> [/CODE] These settings are related to SmartScreen, MS Office, MSHTML, and dangerous extensions. [/QUOTE]

Verification