[{"data":1,"prerenderedAt":304},["ShallowReactive",2],{"doku:en:policy-appendix\u002Fhelp-fullarmor-policies-0ef0f32b-7305-4fc7-bbeb-d43dcc622c81-pol-driverloadpolicy-name":3},{"seite":4,"start":50,"leiste":51,"bereich":303,"zurueck":303,"weiter":303},{"sprache":5,"rel":6,"zu":7,"id":8,"titel":9,"titelHtml":9,"beschreibung":10,"kennzeile":11,"imMenue":12,"html":13,"ueberschriften":14,"sprachen":40},"en","richtlinien-anhang\u002Fhilfe-fullarmor-policies-0ef0f32b-7305-4fc7-bbeb-d43dcc622c81-pol-driverloadpolicy-name","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fhelp-fullarmor-policies-0ef0f32b-7305-4fc7-bbeb-d43dcc622c81-pol-driverloadpolicy-name","referenz-hilfe-fullarmor-policies-0ef0f32b-7305-4fc7-bbeb-d43dcc622c81-pol-driverloadpolicy-name","Boot-Start Driver Initialization Policy","This policy value determines which boot-start drivers Windows initializes after they have been evaluated by an Early Launch Antimalware (ELAM) driver.","since 0.9.8.11",false,"\u003Ch2 id=\"purpose\">Purpose\u003C\u002Fh2>\n\u003Cdetails class=\"doku-klappbox\">\u003Csummary>Show registry keys (1)\u003C\u002Fsummary>\u003Cdiv class=\"doku-klappbox-inhalt\">\n\u003Cul>\n\u003Cli>\u003Ccode>HKLM\\System\\CurrentControlSet\\Policies\\EarlyLaunch\\DriverLoadPolicy\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fdiv>\u003C\u002Fdetails>\n\u003Cp>This policy value determines which boot-start drivers Windows initializes after they have been evaluated by an Early Launch Antimalware (ELAM) driver. ELAM runs before other boot-start drivers and classifies each one as Good, Unknown, Bad but Boot Critical, or Bad.\u003C\u002Fp>\n\u003Cp>The defined \u003Ccode>DriverLoadPolicy\u003C\u002Fcode> data values have the following meanings:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>0x0\u003C\u002Fcode> (\u003Ccode>0\u003C\u002Fcode>): Initializes only drivers classified as Good.\u003C\u002Fli>\n\u003Cli>\u003Ccode>0x1\u003C\u002Fcode> (\u003Ccode>1\u003C\u002Fcode>): Initializes Good and Unknown drivers.\u003C\u002Fli>\n\u003Cli>\u003Ccode>0x3\u003C\u002Fcode> (\u003Ccode>3\u003C\u002Fcode>): Initializes Good, Unknown, and Bad but Boot Critical drivers. This is the documented default behavior.\u003C\u002Fli>\n\u003Cli>\u003Ccode>0x7\u003C\u002Fcode> (\u003Ccode>7\u003C\u002Fcode>): Initializes all boot-start drivers, including drivers classified as Bad.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If the policy is absent or disabled, Windows initializes Good, Unknown, and Bad but Boot Critical drivers. Bad drivers that are not boot-critical are skipped.\u003C\u002Fp>\n\u003Ch2 id=\"notes\">Notes\u003C\u002Fh2>\n\u003Ch3 id=\"additional-effects\">Additional effects\u003C\u002Fh3>\n\u003Cp>Winload includes the selected initialization policy in boot attestation measurements. The policy therefore affects both driver initialization and the measured representation of the system's boot state.\u003C\u002Fp>\n\u003Ch3 id=\"security\">Security\u003C\u002Fh3>\n\u003Cp>More restrictive values reduce the number of untrusted drivers whose code can run in kernel mode during early startup. In particular, \u003Ccode>0x0\u003C\u002Fcode> also prevents drivers classified as Unknown from being initialized.\u003C\u002Fp>\n\u003Cp>\u003Ccode>0x7\u003C\u002Fcode> effectively removes the blocking decision provided by ELAM classification because even boot-start drivers identified as malware can be initialized. \u003Ccode>0x3\u003C\u002Fcode> permits such a driver only when ELAM also classifies it as necessary for the computer to boot successfully. This retains a security exposure but limits it to the boot-critical case.\u003C\u002Fp>\n\u003Ch3 id=\"possible-side-effects\">Possible side effects\u003C\u002Fh3>\n\u003Cp>Excluding Unknown or boot-critical drivers can make required hardware or low-level software unavailable during startup. If a skipped driver is essential to the boot process, Windows might fail to start. After skipping a driver, the kernel continues attempting to initialize the remaining boot-start drivers unless the missing dependency prevents a successful boot.\u003C\u002Fp>\n\u003Ch3 id=\"notes-1\">Notes\u003C\u002Fh3>\n\u003Cp>The policy takes effect at the next system startup. It also depends on an active ELAM boot-start driver supplied by the antimalware product. If no ELAM driver is present or the driver is disabled, the policy has no effect and Windows initializes all boot-start drivers.\u003C\u002Fp>\n\u003Cp>Microsoft documents the ADMX-backed policy value covered here under \u003Ccode>HKLM\\System\\CurrentControlSet\\Policies\\EarlyLaunch\u003C\u002Fcode>. The ELAM driver reference separately documents the operational policy location \u003Ccode>HKLM\\System\\CurrentControlSet\\Control\\EarlyLaunch\u003C\u002Fcode>. These two documented registry locations should not be treated as freely interchangeable values.\u003C\u002Fp>\n\u003Ch3 id=\"microsoft-documentation\">Microsoft documentation\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-system#bootstartdriverinitialization\">Microsoft Learn: System Policy CSP – BootStartDriverInitialization\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows-hardware\u002Fdrivers\u002Finstall\u002Felam-driver-requirements\">Microsoft Learn: ELAM Driver Requirements\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch2 id=\"see-also\">See also\u003C\u002Fh2>\n\u003Cul>\n\u003Cli>\u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fantivirus-attack-surface#e-d20264a392\">Entry in the reference\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n",[15,19,22,26,29,32,34,37],{"ebene":16,"id":17,"text":18},2,"purpose","Purpose",{"ebene":16,"id":20,"text":21},"notes","Notes",{"ebene":23,"id":24,"text":25},3,"additional-effects","Additional effects",{"ebene":23,"id":27,"text":28},"security","Security",{"ebene":23,"id":30,"text":31},"possible-side-effects","Possible side effects",{"ebene":23,"id":33,"text":21},"notes-1",{"ebene":23,"id":35,"text":36},"microsoft-documentation","Microsoft documentation",{"ebene":16,"id":38,"text":39},"see-also","See also",{"de":41,"en":46},{"zu":42,"pfad":43},"\u002Fdokumentation\u002Frichtlinien-anhang\u002Fhilfe-fullarmor-policies-0ef0f32b-7305-4fc7-bbeb-d43dcc622c81-pol-driverloadpolicy-name",[44,45],"richtlinien-anhang","hilfe-fullarmor-policies-0ef0f32b-7305-4fc7-bbeb-d43dcc622c81-pol-driverloadpolicy-name",{"zu":7,"pfad":47},[48,49],"policy-appendix","help-fullarmor-policies-0ef0f32b-7305-4fc7-bbeb-d43dcc622c81-pol-driverloadpolicy-name","\u002Fen\u002Fdocumentation",[52,72,84,92,140,160,176,192,216,232,248],{"titel":53,"pfad":54,"seiten":55},"Getting started","erste-schritte",[56,60,64,68],{"rel":57,"titel":58,"zu":59},"erste-schritte\u002Fwas-ist-setup-foundry","Setup Foundry","\u002Fen\u002Fdocumentation\u002Fgetting-started\u002Fwhat-is-setup-foundry",{"rel":61,"titel":62,"zu":63},"erste-schritte\u002Finstallation","Installing Setup Foundry","\u002Fen\u002Fdocumentation\u002Fgetting-started\u002Finstallation",{"rel":65,"titel":66,"zu":67},"erste-schritte\u002Fschnellstart","Quick start","\u002Fen\u002Fdocumentation\u002Fgetting-started\u002Fquick-start",{"rel":69,"titel":70,"zu":71},"erste-schritte\u002Fablauf","How it works","\u002Fen\u002Fdocumentation\u002Fgetting-started\u002Fhow-it-works",{"titel":73,"pfad":74,"seiten":75},"Setup","wizard",[76,80],{"rel":77,"titel":78,"zu":79},"wizard\u002Fuebersicht","The setup wizard","\u002Fen\u002Fdocumentation\u002Fwizard\u002Foverview",{"rel":81,"titel":82,"zu":83},"wizard\u002Fsystemanforderungen","System requirements","\u002Fen\u002Fdocumentation\u002Fwizard\u002Fsystem-requirements",{"titel":85,"pfad":86,"seiten":87},"Setup in detail","einrichtung-detail",[88],{"rel":89,"titel":90,"zu":91},"einrichtung-detail\u002Fwindows-quelle","Import an ISO","\u002Fen\u002Fdocumentation\u002Fsetup-in-detail\u002Fimport-iso",{"titel":93,"pfad":94,"seiten":95},"Foundry","konfiguration",[96,100,104,108,112,116,120,124,128,132,136],{"rel":97,"titel":98,"zu":99},"konfiguration\u002Fprofile","Profiles","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fprofiles",{"rel":101,"titel":102,"zu":103},"konfiguration\u002Fquellen","Sources","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fsources",{"rel":105,"titel":106,"zu":107},"konfiguration\u002Fbenutzer","Configuring users","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fusers",{"rel":109,"titel":110,"zu":111},"konfiguration\u002Fbilder","Background picture and logo","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fbackground-logo",{"rel":113,"titel":114,"zu":115},"konfiguration\u002Fwindows-bereinigen","Cleaning up Windows","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fclean-up-windows",{"rel":117,"titel":118,"zu":119},"konfiguration\u002Fapps-entfernen","Removing apps","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fremove-apps",{"rel":121,"titel":122,"zu":123},"konfiguration\u002Fauswaehlen","Selecting applications","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fselect-apps",{"rel":125,"titel":126,"zu":127},"konfiguration\u002Frichtlinien","Policies","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fpolicies",{"rel":129,"titel":130,"zu":131},"konfiguration\u002Fpc-informationen","PC information","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fpc-information",{"rel":133,"titel":134,"zu":135},"konfiguration\u002Fnamensschema","Naming scheme","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fnaming-scheme",{"rel":137,"titel":138,"zu":139},"konfiguration\u002Finstall-assist-gestalten","Design the Install Assist","\u002Fen\u002Fdocumentation\u002Fconfiguration\u002Fdesign-install-assist",{"titel":141,"pfad":142,"seiten":143},"Installation","installationsmedien",[144,148,152,156],{"rel":145,"titel":146,"zu":147},"installationsmedien\u002Fusb-stick","Create a USB drive","\u002Fen\u002Fdocumentation\u002Finstallation-media\u002Fusb-drive",{"rel":149,"titel":150,"zu":151},"installationsmedien\u002Fiso-erstellen","Creating an ISO","\u002Fen\u002Fdocumentation\u002Finstallation-media\u002Fcreate-iso",{"rel":153,"titel":154,"zu":155},"installationsmedien\u002Fvhd-erstellen","Create VHD","\u002Fen\u002Fdocumentation\u002Finstallation-media\u002Fcreate-vhd",{"rel":157,"titel":158,"zu":159},"installationsmedien\u002Finstall-assist","Install Assist on the target computer","\u002Fen\u002Fdocumentation\u002Finstallation-media\u002Finstall-assist",{"titel":161,"pfad":162,"seiten":163},"Machines","pruefmaschine",[164,168,172],{"rel":165,"titel":166,"zu":167},"pruefmaschine\u002Fhyper-v-berechtigungen","Hyper-V permissions","\u002Fen\u002Fdocumentation\u002Fmachines\u002Fhyper-v-permissions",{"rel":169,"titel":170,"zu":171},"pruefmaschine\u002Fverwenden","Use the test machine","\u002Fen\u002Fdocumentation\u002Fmachines\u002Fuse",{"rel":173,"titel":174,"zu":175},"pruefmaschine\u002Ferstellen","Create a machine","\u002Fen\u002Fdocumentation\u002Fmachines\u002Fcreate",{"titel":177,"pfad":178,"seiten":179},"Editions","editionen",[180,184,188],{"rel":181,"titel":182,"zu":183},"editionen\u002Fvergleich","Editions at a glance","\u002Fen\u002Fdocumentation\u002Feditions\u002Fcomparison",{"rel":185,"titel":186,"zu":187},"editionen\u002Flizenz-aktivieren","Activate a license","\u002Fen\u002Fdocumentation\u002Feditions\u002Factivate-license",{"rel":189,"titel":190,"zu":191},"editionen\u002Faktivierungen-zuruecksetzen","Reset activations","\u002Fen\u002Fdocumentation\u002Feditions\u002Freset-activations",{"titel":193,"pfad":194,"seiten":195},"Troubleshooting","fehler",[196,200,204,208,212],{"rel":197,"titel":198,"zu":199},"fehler\u002Fusb","USB drive problems","\u002Fen\u002Fdocumentation\u002Ftroubleshooting\u002Fusb",{"rel":201,"titel":202,"zu":203},"fehler\u002Fiso","ISO import problems","\u002Fen\u002Fdocumentation\u002Ftroubleshooting\u002Fiso",{"rel":205,"titel":206,"zu":207},"fehler\u002Fhyperv","Hyper-V problems","\u002Fen\u002Fdocumentation\u002Ftroubleshooting\u002Fhyper-v",{"rel":209,"titel":210,"zu":211},"fehler\u002Finstall-assist","When Setup fails on the target computer","\u002Fen\u002Fdocumentation\u002Ftroubleshooting\u002Finstall-assist",{"rel":213,"titel":214,"zu":215},"fehler\u002Fantwortdatei","The answer file","\u002Fen\u002Fdocumentation\u002Ftroubleshooting\u002Fanswer-file",{"titel":217,"pfad":218,"seiten":219},"Reference","referenz",[220,224,228],{"rel":221,"titel":222,"zu":223},"referenz\u002Fbekannte-probleme","Known issues","\u002Fen\u002Fdocumentation\u002Freference\u002Fknown-issues",{"rel":225,"titel":226,"zu":227},"referenz\u002Fdiagnose-und-protokolle","Diagnostics and logs","\u002Fen\u002Fdocumentation\u002Freference\u002Fdiagnostics-logs",{"rel":229,"titel":230,"zu":231},"referenz\u002Fglossar","Glossary","\u002Fen\u002Fdocumentation\u002Freference\u002Fglossary",{"titel":233,"pfad":234,"seiten":235},"Windows appendix","windows-anhang",[236,240,244],{"rel":237,"titel":238,"zu":239},"windows-anhang\u002Fdienste","Services","\u002Fen\u002Fdocumentation\u002Fwindows-appendix\u002Fservices",{"rel":241,"titel":242,"zu":243},"windows-anhang\u002Faufgaben","Scheduled tasks","\u002Fen\u002Fdocumentation\u002Fwindows-appendix\u002Ftasks",{"rel":245,"titel":246,"zu":247},"windows-anhang\u002Fapps","App packages","\u002Fen\u002Fdocumentation\u002Fwindows-appendix\u002Fapps",{"titel":249,"pfad":44,"seiten":250},"Policy appendix",[251,255,259,263,267,271,275,279,283,287,291,295,299],{"rel":252,"titel":253,"zu":254},"richtlinien-anhang\u002Frichtlinien","Policy reference","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Foverview",{"rel":256,"titel":257,"zu":258},"richtlinien-anhang\u002Frichtlinien-office-haertung","Office hardening","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Foffice-hardening",{"rel":260,"titel":261,"zu":262},"richtlinien-anhang\u002Frichtlinien-edge-internet-explorer","Edge and Internet Explorer","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fedge-internet-explorer",{"rel":264,"titel":265,"zu":266},"richtlinien-anhang\u002Frichtlinien-virenschutz-angriffsflaechen","Virus protection and attack surface","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fantivirus-attack-surface",{"rel":268,"titel":269,"zu":270},"richtlinien-anhang\u002Frichtlinien-netzwerk-freigaben","Network and file sharing","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fnetwork-sharing",{"rel":272,"titel":273,"zu":274},"richtlinien-anhang\u002Frichtlinien-datenschutz-telemetrie","Privacy and telemetry","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fprivacy-telemetry",{"rel":276,"titel":277,"zu":278},"richtlinien-anhang\u002Frichtlinien-protokollierung-ueberwachung","Logging and auditing","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Flogging-auditing",{"rel":280,"titel":281,"zu":282},"richtlinien-anhang\u002Frichtlinien-anmeldung-konten","Sign-in and accounts","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fsign-in-accounts",{"rel":284,"titel":285,"zu":286},"richtlinien-anhang\u002Frichtlinien-geraete-wechselmedien","Devices and removable media","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fdevices-removable-media",{"rel":288,"titel":289,"zu":290},"richtlinien-anhang\u002Frichtlinien-kernschutz","Kernel protection","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fkernel-protection",{"rel":292,"titel":293,"zu":294},"richtlinien-anhang\u002Frichtlinien-laufwerksverschluesselung","Drive encryption","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fdrive-encryption",{"rel":296,"titel":297,"zu":298},"richtlinien-anhang\u002Frichtlinien-windows-update","Windows Update","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fwindows-update",{"rel":300,"titel":301,"zu":302},"richtlinien-anhang\u002Frichtlinien-grundeinstellungen","Defaults and privacy settings","\u002Fen\u002Fdocumentation\u002Fpolicy-appendix\u002Fdefaults-privacy",null,1793974862536]