[{"data":1,"prerenderedAt":342},["ShallowReactive",2],{"doku:en:richtlinien-anhang\u002Frichtlinien-anmeldung-konten":3},{"seite":4,"start":89,"leiste":90,"bereich":288,"zurueck":340,"weiter":341},{"sprache":5,"rel":6,"zu":7,"id":8,"titel":9,"titelHtml":9,"beschreibung":10,"kennzeile":11,"imMenue":12,"html":13,"ueberschriften":14},"en","richtlinien-anhang\u002Frichtlinien-anmeldung-konten","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-anmeldung-konten","referenz-richtlinien-anmeldung-konten","Sign-in and accounts","Every setting of the “Sign-in and accounts” package with its effect, value and recommending sources.","since 0.9.8.11",true,"\u003Ch2 id=\"purpose\">Purpose\u003C\u002Fh2>\n\u003Cp>This page lists every setting of the “Sign-in and accounts” package: what it does, which value Setup Foundry sets and who recommends it. It is generated from the catalog and never edited by hand.\u003C\u002Fp>\n\u003Cp>21 settings.\u003C\u002Fp>\n\u003Ch2 id=\"notes\">Notes\u003C\u002Fh2>\n\u003Ch3 id=\"e-3fb670732c\">User Account Control: Behavior of the elevation prompt for standard users\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>ConsentPromptBehaviorUser\u003C\u002Fcode> DWORD value controls how User Account Control responds when a standard user initiates an operation that requires elevation.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\ConsentPromptBehaviorUser = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-3fb670732c75-consentpromptbehavioruser\">User Account Control: Behavior of the elevation prompt for standard users\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Fapplication-security\u002Fapplication-control\u002Fuser-account-control\u002Fsettings-and-configuration?tabs=reg\">Microsoft Learn: User Account Control settings and configuration\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-0e087d0dfe\">Enumerate administrator accounts on elevation\u003C\u002Fh3>\n\u003Cp>This machine-wide registry value controls whether Windows displays the computer's local administrator accounts for selection when an elevation request requires credentials.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\CredUI\\EnumerateAdministrators = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-credentialsui-enumerateadministrators\">Enumerate administrator accounts on elevation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-credentialsui#enumerateadministrators\">Microsoft Learn: Policy CSP – CredentialsUI\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-33f9605ad5\">Require a password when a computer wakes (on battery)\u003C\u002Fh3>\n\u003Cp>This machine-wide registry value determines whether Windows returns to the secure desktop and requires the user to sign in again when the computer resumes from sleep while running on battery power.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Power\\PowerSettings\\0e796bdb-100d-47d6-a2d5-f7d2daa51f51\\DCSettingIndex = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-powermanagement-dcpromptforpasswordonresume-2\">Require a password when a computer wakes (on battery)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-power#requirepasswordwhencomputerwakesonbattery\">Microsoft Learn: Power Policy CSP – RequirePasswordWhenComputerWakesOnBattery\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-0eafae1131\">Require a password when a computer wakes (plugged in)\u003C\u002Fh3>\n\u003Cp>This registry value controls whether Windows returns to the secure desktop and requires authentication when the system resumes from sleep while connected to AC power.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Power\\PowerSettings\\0e796bdb-100d-47d6-a2d5-f7d2daa51f51\\ACSettingIndex = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-powermanagement-acpromptforpasswordonresume-2\">Require a password when a computer wakes (plugged in)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-power#requirepasswordwhencomputerwakespluggedin\">Microsoft Learn: Power Policy CSP – RequirePasswordWhenComputerWakesPluggedIn\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-3cb61b3277\">Sign-in and lock last interactive user automatically after a restart\u003C\u002Fh3>\n\u003Cp>This value controls Winlogon Automatic Restart Sign-On (ARSO). Following an eligible restart, or a shutdown followed by a cold boot, ARSO signs in the last interactive user automatically and immediately locks the resulting session. The lock still requires authentication before anyone can access the desktop.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\DisableAutomaticRestartSignOn = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-windowslogon2-automaticrestartsignon\">Sign-in and lock last interactive user automatically after a restart\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-windowslogon\">Microsoft Learn: WindowsLogon Policy CSP\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-38e718b4b5\">Allow Custom SSPs and APs to be loaded into LSASS\u003C\u002Fh3>\n\u003Cp>This registry value stores the state of a computer-scoped ADMX Group Policy setting. It controls whether the Local Security Authority (LSA) may load custom security support providers (SSPs) and authentication packages (APs) into the Local Security Authority Subsystem Service (LSASS) process.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\System\\AllowCustomSSPsAPs = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-localsecurityauthority-allowcustomsspsaps\">Allow Custom SSPs and APs to be loaded into LSASS\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-lsa\">Microsoft Learn: LocalSecurityAuthority Policy CSP\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ae980e2143\">Logon options\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>1A00\u003C\u002Fcode> DWORD value controls how credentials are handled when a website in the Restricted Sites Zone requests HTTP authentication. It represents the \u003Ccode>URLACTION_CREDENTIALS_USE\u003C\u002Fcode> URL action.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4\\1A00 = 196608 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-internetexplorer-iz-policylogon-7\">Logon options\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-internetexplorer#restrictedsiteszonelogonoptions\">Microsoft Learn: InternetExplorer Policy CSP – RestrictedSitesZoneLogonOptions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ee06a4a751\">Apply UAC restrictions to local accounts on network logons\u003C\u002Fh3>\n\u003Cp>This registry value controls UAC access-token filtering when local Security Accounts Manager (SAM) accounts authenticate to the computer through a network logon. With type \u003Ccode>REG_DWORD\u003C\u002Fcode> and value data \u003Ccode>0\u003C\u002Fcode>, Windows creates a filtered access token for a local administrator account. Administrative capabilities are removed from the token available to that remote session.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\LocalAccountTokenFilterPolicy = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-ee06a4a751c5-localaccounttokenfilterpolicy\">Apply UAC restrictions to local accounts on network logons\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Ftroubleshoot\u002Fwindows-server\u002Fwindows-security\u002Fuser-account-control-and-remote-restriction\">Microsoft Learn: User Account Control and remote restrictions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa> · \u003Ca href=\"https:\u002F\u002Fwww.cyber.gov.au\u002Fsites\u002Fdefault\u002Ffiles\u002F2025-09\u002Fhardening_microsoft_windows_11_workstations_september_2025.pdf\">ACSC\u002FASD: Hardening Microsoft Windows 11 workstations\u003C\u002Fa> · \u003Ca href=\"https:\u002F\u002Fwww.bsi.bund.de\u002FSharedDocs\u002FDownloads\u002FDE\u002FBSI\u002FCyber-Sicherheit\u002FSiSyPHus\u002FWorkpackage11_Empfehlung_Haertung.pdf?__blob=publicationFile&v=2\">BSI SiSyPHuS Win10, Arbeitspaket 11: Konfigurationsempfehlungen zur Härtung von Windows 10 mit Bordmitteln, Abschnitt 5.5.1.4.1\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-8e22aefee0\">Network access: Do not allow anonymous enumeration of SAM accounts\u003C\u002Fh3>\n\u003Cp>A \u003Ccode>DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> represents the enabled state of this Windows security option. It prevents unauthenticated connections from anonymously enumerating account names managed through the Security Accounts Manager (SAM).\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\RestrictAnonymousSAM = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-8e22aefee0c5-restrictanonymoussam\">Network access: Do not allow anonymous enumeration of SAM accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Fit-pro\u002Fwindows-10\u002Fsecurity\u002Fthreat-protection\u002Fsecurity-policy-settings\u002Fnetwork-access-do-not-allow-anonymous-enumeration-of-sam-accounts\">Microsoft Learn: Network access—Do not allow anonymous enumeration of SAM accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-db7219dcca\">User Account Control: Admin Approval Mode for the Built-in Administrator account\u003C\u002Fh3>\n\u003Cp>Setting the \u003Ccode>FilterAdministratorToken\u003C\u002Fcode> DWORD value to \u003Ccode>1\u003C\u002Fcode> places only the built-in Administrator account—the local account with relative identifier (RID) \u003Ccode>500\u003C\u002Fcode>—in User Account Control (UAC) Admin Approval Mode.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\FilterAdministratorToken = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-db7219dcca55-filteradministratortoken\">User Account Control: Admin Approval Mode for the Built-in Administrator account\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Fthreat-protection\u002Fsecurity-policy-settings\u002Fuser-account-control-admin-approval-mode-for-the-built-in-administrator-account\">Microsoft Learn: User Account Control—Admin Approval Mode for the Built-in Administrator account\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-20ebafd2eb\">Configures LSASS to run as a protected process\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>RunAsPPL\u003C\u002Fcode> registry value controls whether the Local Security Authority process (\u003Ccode>LSASS.exe\u003C\u002Fcode>) runs with added LSA protection as a Protected Process Light (PPL). LSASS performs functions that include validating local and remote sign-ins, enforcing local security policy, and managing credentials used for authentication.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Lsa\\RunAsPPL = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-localsecurityauthority-configurelsaprotectedprocess\">Configures LSASS to run as a protected process\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows-server\u002Fsecurity\u002Fcredentials-protection-and-management\u002Fconfiguring-additional-lsa-protection\">Microsoft Learn: Configure added LSA protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa> · \u003Ca href=\"https:\u002F\u002Fwww.cyber.gov.au\u002Fsites\u002Fdefault\u002Ffiles\u002F2025-09\u002Fhardening_microsoft_windows_11_workstations_september_2025.pdf\">ACSC\u002FASD: Hardening Microsoft Windows 11 workstations\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-bf2c4b38be\">Accounts: Limit local account use of blank passwords to console logon only\u003C\u002Fh3>\n\u003Cp>\u003Ccode>LimitBlankPasswordUse\u003C\u002Fcode> is a \u003Ccode>DWORD\u003C\u002Fcode> value associated with the corresponding Windows security option. A value of \u003Ccode>1\u003C\u002Fcode> enables the restriction: a local user account with a blank password cannot be used for network logons or remote interactive logons. This includes, for example, Remote Desktop Services and network services that rely on Windows authentication.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Lsa\\LimitBlankPasswordUse = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-bf2c4b38bef5-limitblankpassworduse\">Accounts: Limit local account use of blank passwords to console logon only\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Fthreat-protection\u002Fsecurity-policy-settings\u002Faccounts-limit-local-account-use-of-blank-passwords-to-console-logon-only\">Microsoft Learn: Accounts: Limit local account use of blank passwords to console logon only\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-4516c8bb07\">Network security: Do not store LAN Manager hash value on next password change\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>NoLMHash\u003C\u002Fcode> DWORD value set to \u003Ccode>1\u003C\u002Fcode> prevents Windows from generating and storing a LAN Manager password hash (LM hash) when an account password is next set or changed. For local accounts, this affects the local Security Accounts Manager (SAM) database. On domain controllers, it affects domain-account password data stored in Active Directory.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\NoLMHash = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-4516c8bb0735-nolmhash\">Network security: Do not store LAN Manager hash value on next password change\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Fit-pro\u002Fwindows-10\u002Fsecurity\u002Fthreat-protection\u002Fsecurity-policy-settings\u002Fnetwork-security-do-not-store-lan-manager-hash-value-on-next-password-change\">Microsoft Learn: Network security: Do not store LAN Manager hash value on next password change\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-10df93f6d7\">User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode\u003C\u002Fh3>\n\u003Cp>The DWORD value \u003Ccode>2\u003C\u002Fcode> specifies that administrators operating in Admin Approval Mode must explicitly approve or deny an elevation request on the secure desktop. The UAC prompt presents a Yes-or-No consent choice and does not require the administrator to enter credentials.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\ConsentPromptBehaviorAdmin = 2 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-10df93f6d763-consentpromptbehavioradmin\">User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Fapplication-security\u002Fapplication-control\u002Fuser-account-control\u002Fsettings-and-configuration?tabs=reg\">Microsoft Learn: User Account Control settings and configuration\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e335ead182\">User Account Control: Run all administrators in Admin Approval Mode\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>EnableLUA\u003C\u002Fcode> DWORD value controls whether User Account Control (UAC) and Admin Approval Mode are enabled system-wide. A value of \u003Ccode>1\u003C\u002Fcode> enables these features.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\EnableLUA = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-e335ead18212-enablelua\">User Account Control: Run all administrators in Admin Approval Mode\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Fapplication-security\u002Fapplication-control\u002Fuser-account-control\u002Fsettings-and-configuration\">Microsoft Learn: User Account Control settings and configuration\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a2f897a1cc\">WDigest Authentication\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>UseLogonCredential\u003C\u002Fcode> DWORD value controls whether WDigest stores credentials in memory. A value of \u003Ccode>0\u003C\u002Fcode> prevents WDigest from retaining password credentials in memory for subsequent reuse.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\WDigest\\UseLogonCredential = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-a2f897a1ccee-uselogoncredential\">WDigest Authentication\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fgovernance\u002Fpolicy\u002Fsamples\u002Fguest-configuration-baseline-windows\">Microsoft Learn: Windows security baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.cyber.gov.au\u002Fsites\u002Fdefault\u002Ffiles\u002F2025-09\u002Fhardening_microsoft_windows_11_workstations_september_2025.pdf\">ACSC\u002FASD: Hardening Microsoft Windows 11 workstations\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-7434143582\">Prevent enabling lock screen camera\u003C\u002Fh3>\n\u003Cp>This device-wide policy prevents an available camera from being invoked from the Windows lock screen. It also disables the corresponding control in Windows settings, so users cannot enable lock-screen camera access themselves.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\Personalization\\NoLockScreenCamera = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-controlpaneldisplay-cpl-personalization-nolockscreencamera\">Prevent enabling lock screen camera\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-devicelock#preventenablinglockscreencamera\">Microsoft Learn: DeviceLock Policy CSP – PreventEnablingLockScreenCamera\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-df6d8b99a0\">Allow Windows Ink Workspace\u003C\u002Fh3>\n\u003Cp>This device-wide policy value controls whether users can access Windows Ink Workspace and whether the workspace remains available while the device is locked.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\WindowsInkWorkspace\\AllowWindowsInkWorkspace = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-windowsinkworkspace-allowwindowsinkworkspace\">Allow Windows Ink Workspace\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-windowsinkworkspace#allowwindowsinkworkspace\">Microsoft Learn: WindowsInkWorkspace Policy CSP\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a4b9a7c0fb\">Turn off Push To Install service\u003C\u002Fh3>\n\u003Cp>This computer-scoped policy controls whether users can push apps to this device for installation from Microsoft Store on another device or on the web.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\PushToInstall\\DisablePushToInstall = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-pushtoinstall-disablepushtoinstall\">Turn off Push To Install service\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-admx-pushtoinstall\">Microsoft Learn: Policy CSP – ADMX_PushToInstall\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-0b1ee64752\">RunAsPPL\u003C\u002Fh3>\n\u003Cp>Description to follow.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\System\\RunAsPPL = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-693cdb372e\">Network security: LAN Manager authentication level\u003C\u002Fh3>\n\u003Cp>The DWORD value \u003Ccode>5\u003C\u002Fcode> corresponds to \u003Cstrong>Send NTLMv2 responses only. Refuse LM & NTLM\u003C\u002Fstrong>. For network logons that use NTLM challenge-response authentication, the computer generates only NTLMv2 responses when acting as a client. It also uses NTLMv2 session security when the remote system supports it.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\LmCompatibilityLevel = 5 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien#anmeldung-konten\">Policies › Sign-in and accounts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-693cdb372e33-lmcompatibilitylevel\">Network security: LAN Manager authentication level\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Fthreat-protection\u002Fsecurity-policy-settings\u002Fnetwork-security-lan-manager-authentication-level\">Microsoft Learn: Network security: LAN Manager authentication level\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch2 id=\"see-also\">See also\u003C\u002Fh2>\n\u003Cul>\n\u003Cli>\u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien\">Policy reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-protokollierung-ueberwachung\">Logging and auditing\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-geraete-wechselmedien\">Devices and removable media\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n",[15,19,22,26,29,32,35,38,41,44,47,50,53,56,59,62,65,68,71,74,77,80,83,86],{"ebene":16,"id":17,"text":18},2,"purpose","Purpose",{"ebene":16,"id":20,"text":21},"notes","Notes",{"ebene":23,"id":24,"text":25},3,"e-3fb670732c","User Account Control: Behavior of the elevation prompt for standard users",{"ebene":23,"id":27,"text":28},"e-0e087d0dfe","Enumerate administrator accounts on elevation",{"ebene":23,"id":30,"text":31},"e-33f9605ad5","Require a password when a computer wakes (on battery)",{"ebene":23,"id":33,"text":34},"e-0eafae1131","Require a password when a computer wakes (plugged in)",{"ebene":23,"id":36,"text":37},"e-3cb61b3277","Sign-in and lock last interactive user automatically after a restart",{"ebene":23,"id":39,"text":40},"e-38e718b4b5","Allow Custom SSPs and APs to be loaded into LSASS",{"ebene":23,"id":42,"text":43},"e-ae980e2143","Logon options",{"ebene":23,"id":45,"text":46},"e-ee06a4a751","Apply UAC restrictions to local accounts on network logons",{"ebene":23,"id":48,"text":49},"e-8e22aefee0","Network access: Do not allow anonymous enumeration of SAM accounts",{"ebene":23,"id":51,"text":52},"e-db7219dcca","User Account Control: Admin Approval Mode for the Built-in Administrator account",{"ebene":23,"id":54,"text":55},"e-20ebafd2eb","Configures LSASS to run as a protected process",{"ebene":23,"id":57,"text":58},"e-bf2c4b38be","Accounts: Limit local account use of blank passwords to console logon only",{"ebene":23,"id":60,"text":61},"e-4516c8bb07","Network security: Do not store LAN Manager hash value on next password change",{"ebene":23,"id":63,"text":64},"e-10df93f6d7","User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode",{"ebene":23,"id":66,"text":67},"e-e335ead182","User Account Control: Run all administrators in Admin Approval Mode",{"ebene":23,"id":69,"text":70},"e-a2f897a1cc","WDigest Authentication",{"ebene":23,"id":72,"text":73},"e-7434143582","Prevent enabling lock screen camera",{"ebene":23,"id":75,"text":76},"e-df6d8b99a0","Allow Windows Ink Workspace",{"ebene":23,"id":78,"text":79},"e-a4b9a7c0fb","Turn off Push To Install service",{"ebene":23,"id":81,"text":82},"e-0b1ee64752","RunAsPPL",{"ebene":23,"id":84,"text":85},"e-693cdb372e","Network security: LAN Manager authentication level",{"ebene":16,"id":87,"text":88},"see-also","See also","\u002Fen\u002Fdocumentation",[91,111,123,131,179,199,215,231,255,271,287],{"titel":92,"pfad":93,"seiten":94},"Getting started","erste-schritte",[95,99,103,107],{"rel":96,"titel":97,"zu":98},"erste-schritte\u002Fwas-ist-setup-foundry","Setup Foundry","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Fwas-ist-setup-foundry",{"rel":100,"titel":101,"zu":102},"erste-schritte\u002Finstallation","Installing Setup Foundry","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Finstallation",{"rel":104,"titel":105,"zu":106},"erste-schritte\u002Fschnellstart","Quick start","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Fschnellstart",{"rel":108,"titel":109,"zu":110},"erste-schritte\u002Fablauf","How it works","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Fablauf",{"titel":112,"pfad":113,"seiten":114},"Setup","wizard",[115,119],{"rel":116,"titel":117,"zu":118},"wizard\u002Fuebersicht","The setup wizard","\u002Fen\u002Fdocumentation\u002Fwizard\u002Fuebersicht",{"rel":120,"titel":121,"zu":122},"wizard\u002Fsystemanforderungen","System requirements","\u002Fen\u002Fdocumentation\u002Fwizard\u002Fsystemanforderungen",{"titel":124,"pfad":125,"seiten":126},"Setup in detail","einrichtung-detail",[127],{"rel":128,"titel":129,"zu":130},"einrichtung-detail\u002Fwindows-quelle","Import an ISO","\u002Fen\u002Fdocumentation\u002Feinrichtung-detail\u002Fwindows-quelle",{"titel":132,"pfad":133,"seiten":134},"Foundry","konfiguration",[135,139,143,147,151,155,159,163,167,171,175],{"rel":136,"titel":137,"zu":138},"konfiguration\u002Fprofile","Profiles","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fprofile",{"rel":140,"titel":141,"zu":142},"konfiguration\u002Fquellen","Sources","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fquellen",{"rel":144,"titel":145,"zu":146},"konfiguration\u002Fbenutzer","Configuring users","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fbenutzer",{"rel":148,"titel":149,"zu":150},"konfiguration\u002Fbilder","Background picture and logo","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fbilder",{"rel":152,"titel":153,"zu":154},"konfiguration\u002Fwindows-bereinigen","Cleaning up Windows","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fwindows-bereinigen",{"rel":156,"titel":157,"zu":158},"konfiguration\u002Fapps-entfernen","Removing apps","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fapps-entfernen",{"rel":160,"titel":161,"zu":162},"konfiguration\u002Fauswaehlen","Selecting applications","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fauswaehlen",{"rel":164,"titel":165,"zu":166},"konfiguration\u002Frichtlinien","Policies","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien",{"rel":168,"titel":169,"zu":170},"konfiguration\u002Fpc-informationen","PC information","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fpc-informationen",{"rel":172,"titel":173,"zu":174},"konfiguration\u002Fnamensschema","Naming scheme","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fnamensschema",{"rel":176,"titel":177,"zu":178},"konfiguration\u002Finstall-assist-gestalten","Design the Install Assist","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Finstall-assist-gestalten",{"titel":180,"pfad":181,"seiten":182},"Installation","installationsmedien",[183,187,191,195],{"rel":184,"titel":185,"zu":186},"installationsmedien\u002Fusb-stick","Create a USB drive","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Fusb-stick",{"rel":188,"titel":189,"zu":190},"installationsmedien\u002Fiso-erstellen","Creating an ISO","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Fiso-erstellen",{"rel":192,"titel":193,"zu":194},"installationsmedien\u002Fvhd-erstellen","Create VHD","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Fvhd-erstellen",{"rel":196,"titel":197,"zu":198},"installationsmedien\u002Finstall-assist","Install Assist on the target computer","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Finstall-assist",{"titel":200,"pfad":201,"seiten":202},"Machines","pruefmaschine",[203,207,211],{"rel":204,"titel":205,"zu":206},"pruefmaschine\u002Fhyper-v-berechtigungen","Hyper-V permissions","\u002Fen\u002Fdocumentation\u002Fpruefmaschine\u002Fhyper-v-berechtigungen",{"rel":208,"titel":209,"zu":210},"pruefmaschine\u002Fverwenden","Use the test machine","\u002Fen\u002Fdocumentation\u002Fpruefmaschine\u002Fverwenden",{"rel":212,"titel":213,"zu":214},"pruefmaschine\u002Ferstellen","Create a machine","\u002Fen\u002Fdocumentation\u002Fpruefmaschine\u002Ferstellen",{"titel":216,"pfad":217,"seiten":218},"Editions","editionen",[219,223,227],{"rel":220,"titel":221,"zu":222},"editionen\u002Fvergleich","Editions at a glance","\u002Fen\u002Fdocumentation\u002Feditionen\u002Fvergleich",{"rel":224,"titel":225,"zu":226},"editionen\u002Flizenz-aktivieren","Activate a license","\u002Fen\u002Fdocumentation\u002Feditionen\u002Flizenz-aktivieren",{"rel":228,"titel":229,"zu":230},"editionen\u002Faktivierungen-zuruecksetzen","Reset activations","\u002Fen\u002Fdocumentation\u002Feditionen\u002Faktivierungen-zuruecksetzen",{"titel":232,"pfad":233,"seiten":234},"Troubleshooting","fehler",[235,239,243,247,251],{"rel":236,"titel":237,"zu":238},"fehler\u002Fusb","USB drive problems","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fusb",{"rel":240,"titel":241,"zu":242},"fehler\u002Fiso","ISO import problems","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fiso",{"rel":244,"titel":245,"zu":246},"fehler\u002Fhyperv","Hyper-V problems","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fhyperv",{"rel":248,"titel":249,"zu":250},"fehler\u002Finstall-assist","When Setup fails on the target computer","\u002Fen\u002Fdocumentation\u002Ffehler\u002Finstall-assist",{"rel":252,"titel":253,"zu":254},"fehler\u002Fantwortdatei","The answer file","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fantwortdatei",{"titel":256,"pfad":257,"seiten":258},"Reference","referenz",[259,263,267],{"rel":260,"titel":261,"zu":262},"referenz\u002Fbekannte-probleme","Known issues","\u002Fen\u002Fdocumentation\u002Freferenz\u002Fbekannte-probleme",{"rel":264,"titel":265,"zu":266},"referenz\u002Fdiagnose-und-protokolle","Diagnostics and logs","\u002Fen\u002Fdocumentation\u002Freferenz\u002Fdiagnose-und-protokolle",{"rel":268,"titel":269,"zu":270},"referenz\u002Fglossar","Glossary","\u002Fen\u002Fdocumentation\u002Freferenz\u002Fglossar",{"titel":272,"pfad":273,"seiten":274},"Windows appendix","windows-anhang",[275,279,283],{"rel":276,"titel":277,"zu":278},"windows-anhang\u002Fdienste","Services","\u002Fen\u002Fdocumentation\u002Fwindows-anhang\u002Fdienste",{"rel":280,"titel":281,"zu":282},"windows-anhang\u002Faufgaben","Scheduled tasks","\u002Fen\u002Fdocumentation\u002Fwindows-anhang\u002Faufgaben",{"rel":284,"titel":285,"zu":286},"windows-anhang\u002Fapps","App packages","\u002Fen\u002Fdocumentation\u002Fwindows-anhang\u002Fapps",{"titel":288,"pfad":289,"seiten":290},"Policy appendix","richtlinien-anhang",[291,295,299,303,307,311,315,319,320,324,328,332,336],{"rel":292,"titel":293,"zu":294},"richtlinien-anhang\u002Frichtlinien","Policy reference","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien",{"rel":296,"titel":297,"zu":298},"richtlinien-anhang\u002Frichtlinien-office-haertung","Office hardening","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-office-haertung",{"rel":300,"titel":301,"zu":302},"richtlinien-anhang\u002Frichtlinien-edge-internet-explorer","Edge and Internet Explorer","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-edge-internet-explorer",{"rel":304,"titel":305,"zu":306},"richtlinien-anhang\u002Frichtlinien-virenschutz-angriffsflaechen","Virus protection and attack surface","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-virenschutz-angriffsflaechen",{"rel":308,"titel":309,"zu":310},"richtlinien-anhang\u002Frichtlinien-netzwerk-freigaben","Network and file sharing","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-netzwerk-freigaben",{"rel":312,"titel":313,"zu":314},"richtlinien-anhang\u002Frichtlinien-datenschutz-telemetrie","Privacy and telemetry","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-datenschutz-telemetrie",{"rel":316,"titel":317,"zu":318},"richtlinien-anhang\u002Frichtlinien-protokollierung-ueberwachung","Logging and auditing","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-protokollierung-ueberwachung",{"rel":6,"titel":9,"zu":7},{"rel":321,"titel":322,"zu":323},"richtlinien-anhang\u002Frichtlinien-geraete-wechselmedien","Devices and removable media","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-geraete-wechselmedien",{"rel":325,"titel":326,"zu":327},"richtlinien-anhang\u002Frichtlinien-kernschutz","Kernel protection","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-kernschutz",{"rel":329,"titel":330,"zu":331},"richtlinien-anhang\u002Frichtlinien-laufwerksverschluesselung","Drive encryption","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-laufwerksverschluesselung",{"rel":333,"titel":334,"zu":335},"richtlinien-anhang\u002Frichtlinien-windows-update","Windows Update","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-windows-update",{"rel":337,"titel":338,"zu":339},"richtlinien-anhang\u002Frichtlinien-grundeinstellungen","Defaults and privacy settings","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-grundeinstellungen",{"titel":317,"zu":318},{"titel":322,"zu":323},1793199133610]