Windows 10 has two security features, Device Guard and Credential Guard, that can play critical roles in protecting sensitive log-in information and preventing malware from impacting your devices.
If your organization is interested in testing your existing on premise hardware to determine if it is compatible with Microsoft's Credential and Device Guard technologies then this updated tool will help you do that.
The tool, a Windows PowerShell script that requires elevated permissions to run, not only tests your hardware but can also be used to enable these features on hardware that has been found compatible.
According to Microsoft, this script can be used in the following ways:
- Check if the device can run Device Guard or Credential Guard
- Check if the device is compatible with the Hardware Lab Kit tests that are ran by partners
- Enable and disable Device Guard or Credential Guard
- Check the status of Device Guard or Credential Guard on the device
- Integrate with System Center Configuration Manager or any other deployment mechanism to configure registry settings that reflect the device capabilities
- Use an embedded ConfigCI policy in audit mode that can be used by default to enable Device Guard when a custom policy is not provided
The systems you are testing must be running Windows 10 or Windows Server 2016.
If you want a refresher on Device and Credential Guard then be sure to read the Windows 10 Device Guard and Credential Guard Demystified article over on TechNet from earlier this year.
By the way, these features are part of Windows 10 and are not new to the recently released Windows 10 Anniversary Update.
But, wait...there's probably more so be sure to follow me on Twitter and Google+.
----------------------------------
Looking for an awesome, no-nonsense technical conference for IT Pros, Devs, and Devops? Check out IT/Dev Connections!
