Access to this page requires authorization. You can try signing in or changing directories . Access to this page requires authorization. You can try changing directories . This CSP contains some settings that are under development and only applicable for Windows Insider Preview builds . These settings are subject to change and may have dependencies on other features or services in preview. ConfigureSystemGuardLaunch Secure Launch configuration: 0 - Unmanaged, configurable by Administrative user, 1 - Enables Secure Launch if supported by hardware, 2 - Disables Secure Launch. For more information about System Guard, see Introducing Windows Defender System Guard runtime attestation and How a hardware-based root of trust helps protect Windows 10 . Description framework properties : Allowed values : Group policy mapping : EnableVirtualizationBasedSecurity Turns On Virtualization Based Security(VBS) Description framework properties : Allowed values : Group policy mapping : Credential Guard Configuration: 0 - Turns off CredentialGuard remotely if configured previously without UEFI Lock, 1 - Turns on CredentialGuard with UEFI lock. 2 - Turns on CredentialGuard without UEFI lock. Description framework properties : Allowed values : Group policy mapping : MachineIdentityIsolation Machine Identity Isolation: 0 - Machine password is only LSASS-bound and stored in $MACHINE.ACC registry key. 1 - Machine password both LSASS-bound and IUM-bound. It's stored in $MACHINE.ACC and $MACHINE.ACC.IUM registry keys. 2 - Machine password is only IUM-bound and stored in $MACHINE.ACC.IUM registry key.

Description framework properties : Allowed values : Group policy mapping : RequireMicrosoftSignedBootChain Require Microsoft Signed Boot Chain: 1 - Require Microsoft Signed Boot Chain. Description framework properties : Allowed values : RequirePlatformSecurityFeatures Select Platform Security Level: 1 - Turns on VBS with Secure Boot, 3 - Turns on VBS with Secure Boot and DMA. DMA requires hardware support. This setting lets users turn on Credential Guard with virtualization-based security to help protect credentials at next reboot. Value type is integer. Description framework properties : Allowed values : Group policy mapping : Related articles Policy configuration service provider Was this page helpful? Need help with this topic? Want to try using Ask Learn to clarify or guide you through this topic? Additional resources Last updated on 2025-09-02