[{"data":1,"prerenderedAt":295},["ShallowReactive",2],{"doku:en:richtlinien-anhang\u002Fhilfe-fullarmor-policies-0ef0f32b-7305-4fc7-bbeb-d43dcc622c81-pol-driverloadpolicy-name":3},{"seite":4,"start":40,"leiste":41,"bereich":294,"zurueck":294,"weiter":294},{"sprache":5,"rel":6,"zu":7,"id":8,"titel":9,"titelHtml":9,"beschreibung":10,"kennzeile":11,"imMenue":12,"html":13,"ueberschriften":14},"en","richtlinien-anhang\u002Fhilfe-fullarmor-policies-0ef0f32b-7305-4fc7-bbeb-d43dcc622c81-pol-driverloadpolicy-name","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-fullarmor-policies-0ef0f32b-7305-4fc7-bbeb-d43dcc622c81-pol-driverloadpolicy-name","referenz-hilfe-fullarmor-policies-0ef0f32b-7305-4fc7-bbeb-d43dcc622c81-pol-driverloadpolicy-name","Boot-Start Driver Initialization Policy","This policy value determines which boot-start drivers Windows initializes after they have been evaluated by an Early Launch Antimalware (ELAM) driver.","since 0.9.8.11",false,"\u003Ch2 id=\"purpose\">Purpose\u003C\u002Fh2>\n\u003Cdetails class=\"doku-klappbox\">\u003Csummary>Show registry keys (1)\u003C\u002Fsummary>\u003Cdiv class=\"doku-klappbox-inhalt\">\n\u003Cul>\n\u003Cli>\u003Ccode>HKLM\\System\\CurrentControlSet\\Policies\\EarlyLaunch\\DriverLoadPolicy\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fdiv>\u003C\u002Fdetails>\n\u003Cp>This policy value determines which boot-start drivers Windows initializes after they have been evaluated by an Early Launch Antimalware (ELAM) driver. ELAM runs before other boot-start drivers and classifies each one as Good, Unknown, Bad but Boot Critical, or Bad.\u003C\u002Fp>\n\u003Cp>The defined \u003Ccode>DriverLoadPolicy\u003C\u002Fcode> data values have the following meanings:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>0x0\u003C\u002Fcode> (\u003Ccode>0\u003C\u002Fcode>): Initializes only drivers classified as Good.\u003C\u002Fli>\n\u003Cli>\u003Ccode>0x1\u003C\u002Fcode> (\u003Ccode>1\u003C\u002Fcode>): Initializes Good and Unknown drivers.\u003C\u002Fli>\n\u003Cli>\u003Ccode>0x3\u003C\u002Fcode> (\u003Ccode>3\u003C\u002Fcode>): Initializes Good, Unknown, and Bad but Boot Critical drivers. This is the documented default behavior.\u003C\u002Fli>\n\u003Cli>\u003Ccode>0x7\u003C\u002Fcode> (\u003Ccode>7\u003C\u002Fcode>): Initializes all boot-start drivers, including drivers classified as Bad.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If the policy is absent or disabled, Windows initializes Good, Unknown, and Bad but Boot Critical drivers. Bad drivers that are not boot-critical are skipped.\u003C\u002Fp>\n\u003Ch2 id=\"notes\">Notes\u003C\u002Fh2>\n\u003Ch3 id=\"additional-effects\">Additional effects\u003C\u002Fh3>\n\u003Cp>Winload includes the selected initialization policy in boot attestation measurements. The policy therefore affects both driver initialization and the measured representation of the system's boot state.\u003C\u002Fp>\n\u003Ch3 id=\"security\">Security\u003C\u002Fh3>\n\u003Cp>More restrictive values reduce the number of untrusted drivers whose code can run in kernel mode during early startup. In particular, \u003Ccode>0x0\u003C\u002Fcode> also prevents drivers classified as Unknown from being initialized.\u003C\u002Fp>\n\u003Cp>\u003Ccode>0x7\u003C\u002Fcode> effectively removes the blocking decision provided by ELAM classification because even boot-start drivers identified as malware can be initialized. \u003Ccode>0x3\u003C\u002Fcode> permits such a driver only when ELAM also classifies it as necessary for the computer to boot successfully. This retains a security exposure but limits it to the boot-critical case.\u003C\u002Fp>\n\u003Ch3 id=\"possible-side-effects\">Possible side effects\u003C\u002Fh3>\n\u003Cp>Excluding Unknown or boot-critical drivers can make required hardware or low-level software unavailable during startup. If a skipped driver is essential to the boot process, Windows might fail to start. After skipping a driver, the kernel continues attempting to initialize the remaining boot-start drivers unless the missing dependency prevents a successful boot.\u003C\u002Fp>\n\u003Ch3 id=\"notes-1\">Notes\u003C\u002Fh3>\n\u003Cp>The policy takes effect at the next system startup. It also depends on an active ELAM boot-start driver supplied by the antimalware product. If no ELAM driver is present or the driver is disabled, the policy has no effect and Windows initializes all boot-start drivers.\u003C\u002Fp>\n\u003Cp>Microsoft documents the ADMX-backed policy value covered here under \u003Ccode>HKLM\\System\\CurrentControlSet\\Policies\\EarlyLaunch\u003C\u002Fcode>. The ELAM driver reference separately documents the operational policy location \u003Ccode>HKLM\\System\\CurrentControlSet\\Control\\EarlyLaunch\u003C\u002Fcode>. These two documented registry locations should not be treated as freely interchangeable values.\u003C\u002Fp>\n\u003Ch3 id=\"microsoft-documentation\">Microsoft documentation\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-system#bootstartdriverinitialization\">Microsoft Learn: System Policy CSP – BootStartDriverInitialization\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows-hardware\u002Fdrivers\u002Finstall\u002Felam-driver-requirements\">Microsoft Learn: ELAM Driver Requirements\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch2 id=\"see-also\">See also\u003C\u002Fh2>\n\u003Cul>\n\u003Cli>\u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-virenschutz-angriffsflaechen#e-d20264a392\">Entry in the reference\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n",[15,19,22,26,29,32,34,37],{"ebene":16,"id":17,"text":18},2,"purpose","Purpose",{"ebene":16,"id":20,"text":21},"notes","Notes",{"ebene":23,"id":24,"text":25},3,"additional-effects","Additional effects",{"ebene":23,"id":27,"text":28},"security","Security",{"ebene":23,"id":30,"text":31},"possible-side-effects","Possible side effects",{"ebene":23,"id":33,"text":21},"notes-1",{"ebene":23,"id":35,"text":36},"microsoft-documentation","Microsoft documentation",{"ebene":16,"id":38,"text":39},"see-also","See also","\u002Fen\u002Fdocumentation",[42,62,74,82,130,150,166,182,206,222,238],{"titel":43,"pfad":44,"seiten":45},"Getting started","erste-schritte",[46,50,54,58],{"rel":47,"titel":48,"zu":49},"erste-schritte\u002Fwas-ist-setup-foundry","Setup Foundry","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Fwas-ist-setup-foundry",{"rel":51,"titel":52,"zu":53},"erste-schritte\u002Finstallation","Installing Setup Foundry","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Finstallation",{"rel":55,"titel":56,"zu":57},"erste-schritte\u002Fschnellstart","Quick start","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Fschnellstart",{"rel":59,"titel":60,"zu":61},"erste-schritte\u002Fablauf","How it works","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Fablauf",{"titel":63,"pfad":64,"seiten":65},"Setup","wizard",[66,70],{"rel":67,"titel":68,"zu":69},"wizard\u002Fuebersicht","The setup wizard","\u002Fen\u002Fdocumentation\u002Fwizard\u002Fuebersicht",{"rel":71,"titel":72,"zu":73},"wizard\u002Fsystemanforderungen","System requirements","\u002Fen\u002Fdocumentation\u002Fwizard\u002Fsystemanforderungen",{"titel":75,"pfad":76,"seiten":77},"Setup in detail","einrichtung-detail",[78],{"rel":79,"titel":80,"zu":81},"einrichtung-detail\u002Fwindows-quelle","Import an ISO","\u002Fen\u002Fdocumentation\u002Feinrichtung-detail\u002Fwindows-quelle",{"titel":83,"pfad":84,"seiten":85},"Foundry","konfiguration",[86,90,94,98,102,106,110,114,118,122,126],{"rel":87,"titel":88,"zu":89},"konfiguration\u002Fprofile","Profiles","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fprofile",{"rel":91,"titel":92,"zu":93},"konfiguration\u002Fquellen","Sources","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fquellen",{"rel":95,"titel":96,"zu":97},"konfiguration\u002Fbenutzer","Configuring users","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fbenutzer",{"rel":99,"titel":100,"zu":101},"konfiguration\u002Fbilder","Background picture and logo","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fbilder",{"rel":103,"titel":104,"zu":105},"konfiguration\u002Fwindows-bereinigen","Cleaning up Windows","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fwindows-bereinigen",{"rel":107,"titel":108,"zu":109},"konfiguration\u002Fapps-entfernen","Removing apps","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fapps-entfernen",{"rel":111,"titel":112,"zu":113},"konfiguration\u002Fauswaehlen","Selecting applications","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fauswaehlen",{"rel":115,"titel":116,"zu":117},"konfiguration\u002Frichtlinien","Policies","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien",{"rel":119,"titel":120,"zu":121},"konfiguration\u002Fpc-informationen","PC information","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fpc-informationen",{"rel":123,"titel":124,"zu":125},"konfiguration\u002Fnamensschema","Naming scheme","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fnamensschema",{"rel":127,"titel":128,"zu":129},"konfiguration\u002Finstall-assist-gestalten","Design the Install Assist","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Finstall-assist-gestalten",{"titel":131,"pfad":132,"seiten":133},"Installation","installationsmedien",[134,138,142,146],{"rel":135,"titel":136,"zu":137},"installationsmedien\u002Fusb-stick","Create a USB drive","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Fusb-stick",{"rel":139,"titel":140,"zu":141},"installationsmedien\u002Fiso-erstellen","Creating an ISO","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Fiso-erstellen",{"rel":143,"titel":144,"zu":145},"installationsmedien\u002Fvhd-erstellen","Create VHD","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Fvhd-erstellen",{"rel":147,"titel":148,"zu":149},"installationsmedien\u002Finstall-assist","Install Assist on the target computer","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Finstall-assist",{"titel":151,"pfad":152,"seiten":153},"Machines","pruefmaschine",[154,158,162],{"rel":155,"titel":156,"zu":157},"pruefmaschine\u002Fhyper-v-berechtigungen","Hyper-V permissions","\u002Fen\u002Fdocumentation\u002Fpruefmaschine\u002Fhyper-v-berechtigungen",{"rel":159,"titel":160,"zu":161},"pruefmaschine\u002Fverwenden","Use the test machine","\u002Fen\u002Fdocumentation\u002Fpruefmaschine\u002Fverwenden",{"rel":163,"titel":164,"zu":165},"pruefmaschine\u002Ferstellen","Create a machine","\u002Fen\u002Fdocumentation\u002Fpruefmaschine\u002Ferstellen",{"titel":167,"pfad":168,"seiten":169},"Editions","editionen",[170,174,178],{"rel":171,"titel":172,"zu":173},"editionen\u002Fvergleich","Editions at a glance","\u002Fen\u002Fdocumentation\u002Feditionen\u002Fvergleich",{"rel":175,"titel":176,"zu":177},"editionen\u002Flizenz-aktivieren","Activate a license","\u002Fen\u002Fdocumentation\u002Feditionen\u002Flizenz-aktivieren",{"rel":179,"titel":180,"zu":181},"editionen\u002Faktivierungen-zuruecksetzen","Reset activations","\u002Fen\u002Fdocumentation\u002Feditionen\u002Faktivierungen-zuruecksetzen",{"titel":183,"pfad":184,"seiten":185},"Troubleshooting","fehler",[186,190,194,198,202],{"rel":187,"titel":188,"zu":189},"fehler\u002Fusb","USB drive problems","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fusb",{"rel":191,"titel":192,"zu":193},"fehler\u002Fiso","ISO import problems","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fiso",{"rel":195,"titel":196,"zu":197},"fehler\u002Fhyperv","Hyper-V problems","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fhyperv",{"rel":199,"titel":200,"zu":201},"fehler\u002Finstall-assist","When Setup fails on the target computer","\u002Fen\u002Fdocumentation\u002Ffehler\u002Finstall-assist",{"rel":203,"titel":204,"zu":205},"fehler\u002Fantwortdatei","The answer file","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fantwortdatei",{"titel":207,"pfad":208,"seiten":209},"Reference","referenz",[210,214,218],{"rel":211,"titel":212,"zu":213},"referenz\u002Fbekannte-probleme","Known issues","\u002Fen\u002Fdocumentation\u002Freferenz\u002Fbekannte-probleme",{"rel":215,"titel":216,"zu":217},"referenz\u002Fdiagnose-und-protokolle","Diagnostics and logs","\u002Fen\u002Fdocumentation\u002Freferenz\u002Fdiagnose-und-protokolle",{"rel":219,"titel":220,"zu":221},"referenz\u002Fglossar","Glossary","\u002Fen\u002Fdocumentation\u002Freferenz\u002Fglossar",{"titel":223,"pfad":224,"seiten":225},"Windows appendix","windows-anhang",[226,230,234],{"rel":227,"titel":228,"zu":229},"windows-anhang\u002Fdienste","Services","\u002Fen\u002Fdocumentation\u002Fwindows-anhang\u002Fdienste",{"rel":231,"titel":232,"zu":233},"windows-anhang\u002Faufgaben","Scheduled tasks","\u002Fen\u002Fdocumentation\u002Fwindows-anhang\u002Faufgaben",{"rel":235,"titel":236,"zu":237},"windows-anhang\u002Fapps","App packages","\u002Fen\u002Fdocumentation\u002Fwindows-anhang\u002Fapps",{"titel":239,"pfad":240,"seiten":241},"Policy appendix","richtlinien-anhang",[242,246,250,254,258,262,266,270,274,278,282,286,290],{"rel":243,"titel":244,"zu":245},"richtlinien-anhang\u002Frichtlinien","Policy reference","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien",{"rel":247,"titel":248,"zu":249},"richtlinien-anhang\u002Frichtlinien-office-haertung","Office hardening","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-office-haertung",{"rel":251,"titel":252,"zu":253},"richtlinien-anhang\u002Frichtlinien-edge-internet-explorer","Edge and Internet Explorer","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-edge-internet-explorer",{"rel":255,"titel":256,"zu":257},"richtlinien-anhang\u002Frichtlinien-virenschutz-angriffsflaechen","Virus protection and attack surface","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-virenschutz-angriffsflaechen",{"rel":259,"titel":260,"zu":261},"richtlinien-anhang\u002Frichtlinien-netzwerk-freigaben","Network and file sharing","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-netzwerk-freigaben",{"rel":263,"titel":264,"zu":265},"richtlinien-anhang\u002Frichtlinien-datenschutz-telemetrie","Privacy and telemetry","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-datenschutz-telemetrie",{"rel":267,"titel":268,"zu":269},"richtlinien-anhang\u002Frichtlinien-protokollierung-ueberwachung","Logging and auditing","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-protokollierung-ueberwachung",{"rel":271,"titel":272,"zu":273},"richtlinien-anhang\u002Frichtlinien-anmeldung-konten","Sign-in and accounts","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-anmeldung-konten",{"rel":275,"titel":276,"zu":277},"richtlinien-anhang\u002Frichtlinien-geraete-wechselmedien","Devices and removable media","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-geraete-wechselmedien",{"rel":279,"titel":280,"zu":281},"richtlinien-anhang\u002Frichtlinien-kernschutz","Kernel protection","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-kernschutz",{"rel":283,"titel":284,"zu":285},"richtlinien-anhang\u002Frichtlinien-laufwerksverschluesselung","Drive encryption","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-laufwerksverschluesselung",{"rel":287,"titel":288,"zu":289},"richtlinien-anhang\u002Frichtlinien-windows-update","Windows Update","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-windows-update",{"rel":291,"titel":292,"zu":293},"richtlinien-anhang\u002Frichtlinien-grundeinstellungen","Defaults and privacy settings","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-grundeinstellungen",null,1793199127854]