[{"data":1,"prerenderedAt":291},["ShallowReactive",2],{"doku:en:policy-appendix\u002Fdrive-encryption":3},{"seite":4,"start":39,"leiste":40,"bereich":238,"zurueck":289,"weiter":290},{"sprache":5,"rel":6,"zu":7,"id":8,"titel":9,"titelHtml":9,"beschreibung":10,"kennzeile":11,"imMenue":12,"html":13,"ueberschriften":14,"sprachen":29},"en","richtlinien-anhang\u002Frichtlinien-laufwerksverschluesselung","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fdrive-encryption","referenz-richtlinien-laufwerksverschluesselung","Drive encryption","Every setting of the “Drive encryption” package with its effect, value and recommending sources.","since 0.9.8.11",true,"\u003Ch2 id=\"purpose\">Purpose\u003C\u002Fh2>\n\u003Cp>This page lists every setting of the “Drive encryption” package: what it does, which value Setup Foundry sets and who recommends it. It is generated from the catalog and never edited by hand.\u003C\u002Fp>\n\u003Cp>1 settings.\u003C\u002Fp>\n\u003Ch2 id=\"notes\">Notes\u003C\u002Fh2>\n\u003Ch3 id=\"e-249309f344\">Disable new DMA devices when this computer is locked\u003C\u002Fh3>\n\u003Cp>When the DWORD value is set to \u003Ccode>1\u003C\u002Fcode>, it enables a BitLocker Group Policy that restricts direct memory access (DMA) through hot-pluggable PCI ports. Windows blocks DMA through these ports and postpones enumeration of newly attached PCI devices until a user signs in.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\DisableExternalDMAUnderLock = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fpolicies#laufwerksverschluesselung\">Policies › Drive encryption\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fhelp-microsoft-policies-volumeencryption-disableexternaldmaunderlock-name\">Disable new DMA devices when this computer is locked\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Foperating-system-security\u002Fdata-protection\u002Fbitlocker\u002Fconfigure#disable-new-dma-devices-when-this-computer-is-locked\">Microsoft Learn: Configure BitLocker – Disable new DMA devices when this computer is locked\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch2 id=\"see-also\">See also\u003C\u002Fh2>\n\u003Cul>\n\u003Cli>\u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Foverview\">Policy reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fkernel-protection\">Kernel protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fwindows-update\">Windows Update\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n",[15,19,22,26],{"ebene":16,"id":17,"text":18},2,"purpose","Purpose",{"ebene":16,"id":20,"text":21},"notes","Notes",{"ebene":23,"id":24,"text":25},3,"e-249309f344","Disable new DMA devices when this computer is locked",{"ebene":16,"id":27,"text":28},"see-also","See also",{"de":30,"en":35},{"zu":31,"pfad":32},"\u002Fdokumentation\u002Frichtlinien-anhang\u002Frichtlinien-laufwerksverschluesselung",[33,34],"richtlinien-anhang","richtlinien-laufwerksverschluesselung",{"zu":7,"pfad":36},[37,38],"policy-appendix","drive-encryption","\u002Fen\u002Fdocumentation",[41,61,73,81,129,149,165,181,205,221,237],{"titel":42,"pfad":43,"seiten":44},"Getting started","erste-schritte",[45,49,53,57],{"rel":46,"titel":47,"zu":48},"erste-schritte\u002Fwas-ist-setup-foundry","Setup Foundry","\u002Fen\u002Fdocumentation\u002Fgetting-started\u002Fwhat-is-setup-foundry",{"rel":50,"titel":51,"zu":52},"erste-schritte\u002Finstallation","Installing Setup Foundry","\u002Fen\u002Fdocumentation\u002Fgetting-started\u002Finstallation",{"rel":54,"titel":55,"zu":56},"erste-schritte\u002Fschnellstart","Quick start","\u002Fen\u002Fdocumentation\u002Fgetting-started\u002Fquick-start",{"rel":58,"titel":59,"zu":60},"erste-schritte\u002Fablauf","How it works","\u002Fen\u002Fdocumentation\u002Fgetting-started\u002Fhow-it-works",{"titel":62,"pfad":63,"seiten":64},"Setup","wizard",[65,69],{"rel":66,"titel":67,"zu":68},"wizard\u002Fuebersicht","The setup wizard","\u002Fen\u002Fdocumentation\u002Fwizard\u002Foverview",{"rel":70,"titel":71,"zu":72},"wizard\u002Fsystemanforderungen","System requirements","\u002Fen\u002Fdocumentation\u002Fwizard\u002Fsystem-requirements",{"titel":74,"pfad":75,"seiten":76},"Setup in detail","einrichtung-detail",[77],{"rel":78,"titel":79,"zu":80},"einrichtung-detail\u002Fwindows-quelle","Import an ISO","\u002Fen\u002Fdocumentation\u002Fsetup-in-detail\u002Fimport-iso",{"titel":82,"pfad":83,"seiten":84},"Foundry","konfiguration",[85,89,93,97,101,105,109,113,117,121,125],{"rel":86,"titel":87,"zu":88},"konfiguration\u002Fprofile","Profiles","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fprofiles",{"rel":90,"titel":91,"zu":92},"konfiguration\u002Fquellen","Sources","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fsources",{"rel":94,"titel":95,"zu":96},"konfiguration\u002Fbenutzer","Configuring users","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fusers",{"rel":98,"titel":99,"zu":100},"konfiguration\u002Fbilder","Background picture and logo","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fbackground-logo",{"rel":102,"titel":103,"zu":104},"konfiguration\u002Fwindows-bereinigen","Cleaning up Windows","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fclean-up-windows",{"rel":106,"titel":107,"zu":108},"konfiguration\u002Fapps-entfernen","Removing apps","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fremove-apps",{"rel":110,"titel":111,"zu":112},"konfiguration\u002Fauswaehlen","Selecting applications","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fselect-apps",{"rel":114,"titel":115,"zu":116},"konfiguration\u002Frichtlinien","Policies","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fpolicies",{"rel":118,"titel":119,"zu":120},"konfiguration\u002Fpc-informationen","PC information","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fpc-information",{"rel":122,"titel":123,"zu":124},"konfiguration\u002Fnamensschema","Naming scheme","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fnaming-scheme",{"rel":126,"titel":127,"zu":128},"konfiguration\u002Finstall-assist-gestalten","Design the Install Assist","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fdesign-install-assist",{"titel":130,"pfad":131,"seiten":132},"Installation","installationsmedien",[133,137,141,145],{"rel":134,"titel":135,"zu":136},"installationsmedien\u002Fusb-stick","Create a USB drive","\u002Fen\u002Fdocumentation\u002Finstallation-media\u002Fusb-drive",{"rel":138,"titel":139,"zu":140},"installationsmedien\u002Fiso-erstellen","Creating an ISO","\u002Fen\u002Fdocumentation\u002Finstallation-media\u002Fcreate-iso",{"rel":142,"titel":143,"zu":144},"installationsmedien\u002Fvhd-erstellen","Create VHD","\u002Fen\u002Fdocumentation\u002Finstallation-media\u002Fcreate-vhd",{"rel":146,"titel":147,"zu":148},"installationsmedien\u002Finstall-assist","Install Assist on the target computer","\u002Fen\u002Fdocumentation\u002Finstallation-media\u002Finstall-assist",{"titel":150,"pfad":151,"seiten":152},"Machines","pruefmaschine",[153,157,161],{"rel":154,"titel":155,"zu":156},"pruefmaschine\u002Fhyper-v-berechtigungen","Hyper-V permissions","\u002Fen\u002Fdocumentation\u002Fmachines\u002Fhyper-v-permissions",{"rel":158,"titel":159,"zu":160},"pruefmaschine\u002Fverwenden","Use the test machine","\u002Fen\u002Fdocumentation\u002Fmachines\u002Fuse",{"rel":162,"titel":163,"zu":164},"pruefmaschine\u002Ferstellen","Create a machine","\u002Fen\u002Fdocumentation\u002Fmachines\u002Fcreate",{"titel":166,"pfad":167,"seiten":168},"Editions","editionen",[169,173,177],{"rel":170,"titel":171,"zu":172},"editionen\u002Fvergleich","Editions at a glance","\u002Fen\u002Fdocumentation\u002Feditions\u002Fcomparison",{"rel":174,"titel":175,"zu":176},"editionen\u002Flizenz-aktivieren","Activate a license","\u002Fen\u002Fdocumentation\u002Feditions\u002Factivate-license",{"rel":178,"titel":179,"zu":180},"editionen\u002Faktivierungen-zuruecksetzen","Reset activations","\u002Fen\u002Fdocumentation\u002Feditions\u002Freset-activations",{"titel":182,"pfad":183,"seiten":184},"Troubleshooting","fehler",[185,189,193,197,201],{"rel":186,"titel":187,"zu":188},"fehler\u002Fusb","USB drive problems","\u002Fen\u002Fdocumentation\u002Ftroubleshooting\u002Fusb",{"rel":190,"titel":191,"zu":192},"fehler\u002Fiso","ISO import problems","\u002Fen\u002Fdocumentation\u002Ftroubleshooting\u002Fiso",{"rel":194,"titel":195,"zu":196},"fehler\u002Fhyperv","Hyper-V problems","\u002Fen\u002Fdocumentation\u002Ftroubleshooting\u002Fhyper-v",{"rel":198,"titel":199,"zu":200},"fehler\u002Finstall-assist","When Setup fails on the target computer","\u002Fen\u002Fdocumentation\u002Ftroubleshooting\u002Finstall-assist",{"rel":202,"titel":203,"zu":204},"fehler\u002Fantwortdatei","The answer file","\u002Fen\u002Fdocumentation\u002Ftroubleshooting\u002Fanswer-file",{"titel":206,"pfad":207,"seiten":208},"Reference","referenz",[209,213,217],{"rel":210,"titel":211,"zu":212},"referenz\u002Fbekannte-probleme","Known issues","\u002Fen\u002Fdocumentation\u002Freference\u002Fknown-issues",{"rel":214,"titel":215,"zu":216},"referenz\u002Fdiagnose-und-protokolle","Diagnostics and logs","\u002Fen\u002Fdocumentation\u002Freference\u002Fdiagnostics-logs",{"rel":218,"titel":219,"zu":220},"referenz\u002Fglossar","Glossary","\u002Fen\u002Fdocumentation\u002Freference\u002Fglossary",{"titel":222,"pfad":223,"seiten":224},"Windows appendix","windows-anhang",[225,229,233],{"rel":226,"titel":227,"zu":228},"windows-anhang\u002Fdienste","Services","\u002Fen\u002Fdocumentation\u002Fwindows-appendix\u002Fservices",{"rel":230,"titel":231,"zu":232},"windows-anhang\u002Faufgaben","Scheduled tasks","\u002Fen\u002Fdocumentation\u002Fwindows-appendix\u002Ftasks",{"rel":234,"titel":235,"zu":236},"windows-anhang\u002Fapps","App packages","\u002Fen\u002Fdocumentation\u002Fwindows-appendix\u002Fapps",{"titel":238,"pfad":33,"seiten":239},"Policy appendix",[240,244,248,252,256,260,264,268,272,276,280,281,285],{"rel":241,"titel":242,"zu":243},"richtlinien-anhang\u002Frichtlinien","Policy reference","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Foverview",{"rel":245,"titel":246,"zu":247},"richtlinien-anhang\u002Frichtlinien-office-haertung","Office hardening","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Foffice-hardening",{"rel":249,"titel":250,"zu":251},"richtlinien-anhang\u002Frichtlinien-edge-internet-explorer","Edge and Internet Explorer","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fedge-internet-explorer",{"rel":253,"titel":254,"zu":255},"richtlinien-anhang\u002Frichtlinien-virenschutz-angriffsflaechen","Virus protection and attack surface","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fantivirus-attack-surface",{"rel":257,"titel":258,"zu":259},"richtlinien-anhang\u002Frichtlinien-netzwerk-freigaben","Network and file sharing","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fnetwork-sharing",{"rel":261,"titel":262,"zu":263},"richtlinien-anhang\u002Frichtlinien-datenschutz-telemetrie","Privacy and telemetry","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fprivacy-telemetry",{"rel":265,"titel":266,"zu":267},"richtlinien-anhang\u002Frichtlinien-protokollierung-ueberwachung","Logging and auditing","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Flogging-auditing",{"rel":269,"titel":270,"zu":271},"richtlinien-anhang\u002Frichtlinien-anmeldung-konten","Sign-in and accounts","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fsign-in-accounts",{"rel":273,"titel":274,"zu":275},"richtlinien-anhang\u002Frichtlinien-geraete-wechselmedien","Devices and removable media","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fdevices-removable-media",{"rel":277,"titel":278,"zu":279},"richtlinien-anhang\u002Frichtlinien-kernschutz","Kernel protection","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fkernel-protection",{"rel":6,"titel":9,"zu":7},{"rel":282,"titel":283,"zu":284},"richtlinien-anhang\u002Frichtlinien-windows-update","Windows Update","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fwindows-update",{"rel":286,"titel":287,"zu":288},"richtlinien-anhang\u002Frichtlinien-grundeinstellungen","Defaults and privacy settings","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fdefaults-privacy",{"titel":278,"zu":279},{"titel":283,"zu":284},1793974859395]