getApplicationGuardBlockClipboardSharing() : ApplicationGuardBlockClipboardSharingType|null
Return values
ApplicationGuardBlockClipboardSharingType|null —The applicationGuardBlockClipboardSharing
getApplicationGuardBlockFileTransfer()
Gets the applicationGuardBlockFileTransfer Block clipboard to transfer image file, text file or neither of them. Possible values are: notConfigured, blockImageAndTextFile, blockImageFile, blockNone, blockTextFile.
public
getApplicationGuardBlockFileTransfer() : ApplicationGuardBlockFileTransferType|null
Return values
ApplicationGuardBlockFileTransferType|null —The applicationGuardBlockFileTransfer
getApplicationGuardBlockNonEnterpriseContent()
Gets the applicationGuardBlockNonEnterpriseContent Block enterprise sites to load non-enterprise content, such as third party plug-ins
public
getApplicationGuardBlockNonEnterpriseContent() : bool|null
Return values
bool|null —The applicationGuardBlockNonEnterpriseContent
getApplicationGuardCertificateThumbprints()
Gets the applicationGuardCertificateThumbprints Allows certain device level Root Certificates to be shared with the Microsoft Defender Application Guard container.
public
getApplicationGuardCertificateThumbprints() : string|null
Return values
string|null —The applicationGuardCertificateThumbprints
getApplicationGuardEnabled()
Gets the applicationGuardEnabled Enable Windows Defender Application Guard
public
getApplicationGuardEnabled() : bool|null
Return values
bool|null —The applicationGuardEnabled
getApplicationGuardEnabledOptions()
Gets the applicationGuardEnabledOptions Enable Windows Defender Application Guard for newer Windows builds. Possible values are: notConfigured, enabledForEdge, enabledForOffice, enabledForEdgeAndOffice.
public
getApplicationGuardEnabledOptions() : ApplicationGuardEnabledOptions|null
Return values
ApplicationGuardEnabledOptions|null —The applicationGuardEnabledOptions
getApplicationGuardForceAuditing()
Gets the applicationGuardForceAuditing Force auditing will persist Windows logs and events to meet security/compliance criteria (sample events are user login-logoff, use of privilege rights, software installation, system changes, etc.)
public
getApplicationGuardForceAuditing() : bool|null
Return values
bool|null —The applicationGuardForceAuditing
getAppLockerApplicationControl()
Gets the appLockerApplicationControl Enables the Admin to choose what types of app to allow on devices. Possible values are: notConfigured, enforceComponentsAndStoreApps, auditComponentsAndStoreApps, enforceComponentsStoreAppsAndSmartlocker, auditComponentsStoreAppsAndSmartlocker.
public
getAppLockerApplicationControl() : AppLockerApplicationControlType|null
Return values
AppLockerApplicationControlType|null —The appLockerApplicationControl
getAssignments()
Gets the assignments The list of assignments for the device configuration profile.
public
getAssignments() : array<string|int, mixed>|null
Return values
array<string|int, mixed>|null —The assignments
getBitLockerAllowStandardUserEncryption()
Gets the bitLockerAllowStandardUserEncryption Allows the admin to allow standard users to enable encrpytion during Azure AD Join.
public
getBitLockerAllowStandardUserEncryption() : bool|null
Return values
bool|null —The bitLockerAllowStandardUserEncryption
getBitLockerDisableWarningForOtherDiskEncryption()
Gets the bitLockerDisableWarningForOtherDiskEncryption Allows the Admin to disable the warning prompt for other disk encryption on the user machines.
public
getBitLockerDisableWarningForOtherDiskEncryption() : bool|null
Return values
bool|null —The bitLockerDisableWarningForOtherDiskEncryption
getBitLockerEnableStorageCardEncryptionOnMobile()
Gets the bitLockerEnableStorageCardEncryptionOnMobile Allows the admin to require encryption to be turned on using BitLocker. This policy is valid only for a mobile SKU.
public
getBitLockerEnableStorageCardEncryptionOnMobile() : bool|null
Return values
bool|null —The bitLockerEnableStorageCardEncryptionOnMobile
getBitLockerEncryptDevice()
Gets the bitLockerEncryptDevice Allows the admin to require encryption to be turned on using BitLocker.
public
getBitLockerEncryptDevice() : bool|null
Return values
bool|null —The bitLockerEncryptDevice
getBitLockerFixedDrivePolicy()
Gets the bitLockerFixedDrivePolicy BitLocker Fixed Drive Policy.
public
getBitLockerFixedDrivePolicy() : BitLockerFixedDrivePolicy|null
Return values
BitLockerFixedDrivePolicy|null —The bitLockerFixedDrivePolicy
getBitLockerRecoveryPasswordRotation()
Gets the bitLockerRecoveryPasswordRotation This setting initiates a client-driven recovery password rotation after an OS drive recovery (either by using bootmgr or WinRE). Possible values are: notConfigured, disabled, enabledForAzureAd, enabledForAzureAdAndHybrid.
public
getBitLockerRecoveryPasswordRotation() : BitLockerRecoveryPasswordRotationType|null
Return values
BitLockerRecoveryPasswordRotationType|null —The bitLockerRecoveryPasswordRotation
getBitLockerRemovableDrivePolicy()
Gets the bitLockerRemovableDrivePolicy BitLocker Removable Drive Policy.
public
getBitLockerRemovableDrivePolicy() : BitLockerRemovableDrivePolicy|null
Return values
BitLockerRemovableDrivePolicy|null —The bitLockerRemovableDrivePolicy
getBitLockerSystemDrivePolicy()
Gets the bitLockerSystemDrivePolicy BitLocker System Drive Policy.
public
getBitLockerSystemDrivePolicy() : BitLockerSystemDrivePolicy|null
Return values
BitLockerSystemDrivePolicy|null —The bitLockerSystemDrivePolicy
getCreatedDateTime()
Gets the createdDateTime DateTime the object was created.
public
getCreatedDateTime() : DateTime|null
Return values
DateTime|null —The createdDateTime
getDefenderAdditionalGuardedFolders()
Gets the defenderAdditionalGuardedFolders List of folder paths to be added to the list of protected folders
public
getDefenderAdditionalGuardedFolders() : string|null
Return values
string|null —The defenderAdditionalGuardedFolders
getDefenderAdobeReaderLaunchChildProcess()
Gets the defenderAdobeReaderLaunchChildProcess Value indicating the behavior of Adobe Reader from creating child processes. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
getDefenderAdobeReaderLaunchChildProcess() : DefenderProtectionType|null
Return values
DefenderProtectionType|null —The defenderAdobeReaderLaunchChildProcess
getDefenderAdvancedRansomewareProtectionType()
Gets the defenderAdvancedRansomewareProtectionType Value indicating use of advanced protection against ransomeware. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
getDefenderAdvancedRansomewareProtectionType() : DefenderProtectionType|null
Return values
DefenderProtectionType|null —The defenderAdvancedRansomewareProtectionType
getDefenderAllowBehaviorMonitoring()
Gets the defenderAllowBehaviorMonitoring Allows or disallows Windows Defender Behavior Monitoring functionality.
public
getDefenderAllowBehaviorMonitoring() : bool|null
Return values
bool|null —The defenderAllowBehaviorMonitoring
getDefenderAllowCloudProtection()
Gets the defenderAllowCloudProtection To best protect your PC, Windows Defender will send information to Microsoft about any problems it finds. Microsoft will analyze that information, learn more about problems affecting you and other customers, and offer improved solutions.
public
getDefenderAllowCloudProtection() : bool|null
Return values
bool|null —The defenderAllowCloudProtection
getDefenderAllowEndUserAccess()
Gets the defenderAllowEndUserAccess Allows or disallows user access to the Windows Defender UI. If disallowed, all Windows Defender notifications will also be suppressed.
public
getDefenderAllowEndUserAccess() : bool|null
Return values
bool|null —The defenderAllowEndUserAccess
getDefenderAllowIntrusionPreventionSystem()
Gets the defenderAllowIntrusionPreventionSystem Allows or disallows Windows Defender Intrusion Prevention functionality.
public
getDefenderAllowIntrusionPreventionSystem() : bool|null
Return values
bool|null —The defenderAllowIntrusionPreventionSystem
getDefenderAllowOnAccessProtection()
Gets the defenderAllowOnAccessProtection Allows or disallows Windows Defender On Access Protection functionality.
public
getDefenderAllowOnAccessProtection() : bool|null
Return values
bool|null —The defenderAllowOnAccessProtection
getDefenderAllowRealTimeMonitoring()
Gets the defenderAllowRealTimeMonitoring Allows or disallows Windows Defender Realtime Monitoring functionality.
public
getDefenderAllowRealTimeMonitoring() : bool|null
Return values
bool|null —The defenderAllowRealTimeMonitoring
getDefenderAllowScanArchiveFiles()
Gets the defenderAllowScanArchiveFiles Allows or disallows scanning of archives.
public
getDefenderAllowScanArchiveFiles() : bool|null
Return values
bool|null —The defenderAllowScanArchiveFiles
getDefenderAllowScanDownloads()
Gets the defenderAllowScanDownloads Allows or disallows Windows Defender IOAVP Protection functionality.
public
getDefenderAllowScanDownloads() : bool|null
Return values
bool|null —The defenderAllowScanDownloads
getDefenderAllowScanNetworkFiles()
Gets the defenderAllowScanNetworkFiles Allows or disallows a scanning of network files.
public
getDefenderAllowScanNetworkFiles() : bool|null
Return values
bool|null —The defenderAllowScanNetworkFiles
getDefenderAllowScanRemovableDrivesDuringFullScan()
Gets the defenderAllowScanRemovableDrivesDuringFullScan Allows or disallows a full scan of removable drives. During a quick scan, removable drives may still be scanned.
public
getDefenderAllowScanRemovableDrivesDuringFullScan() : bool|null
Return values
bool|null —The defenderAllowScanRemovableDrivesDuringFullScan
getDefenderAllowScanScriptsLoadedInInternetExplorer()
Gets the defenderAllowScanScriptsLoadedInInternetExplorer Allows or disallows Windows Defender Script Scanning functionality.
public
getDefenderAllowScanScriptsLoadedInInternetExplorer() : bool|null
Return values
bool|null —The defenderAllowScanScriptsLoadedInInternetExplorer
getDefenderAttackSurfaceReductionExcludedPaths()
Gets the defenderAttackSurfaceReductionExcludedPaths List of exe files and folders to be excluded from attack surface reduction rules
public
getDefenderAttackSurfaceReductionExcludedPaths() : string|null
Return values
string|null —The defenderAttackSurfaceReductionExcludedPaths
getDefenderBlockEndUserAccess()
Gets the defenderBlockEndUserAccess Allows or disallows user access to the Windows Defender UI. If disallowed, all Windows Defender notifications will also be suppressed.
public
getDefenderBlockEndUserAccess() : bool|null
Return values
bool|null —The defenderBlockEndUserAccess
getDefenderBlockPersistenceThroughWmiType()
Gets the defenderBlockPersistenceThroughWmiType Value indicating the behavior of Block persistence through WMI event subscription. Possible values are: userDefined, block, auditMode, warn, disable.
public
getDefenderBlockPersistenceThroughWmiType() : DefenderAttackSurfaceType|null
Return values
DefenderAttackSurfaceType|null —The defenderBlockPersistenceThroughWmiType
getDefenderCheckForSignaturesBeforeRunningScan()
Gets the defenderCheckForSignaturesBeforeRunningScan This policy setting allows you to manage whether a check for new virus and spyware definitions will occur before running a scan.
public
getDefenderCheckForSignaturesBeforeRunningScan() : bool|null
Return values
bool|null —The defenderCheckForSignaturesBeforeRunningScan
getDefenderCloudBlockLevel()
Gets the defenderCloudBlockLevel Added in Windows 10, version 1709. This policy setting determines how aggressive Windows Defender Antivirus will be in blocking and scanning suspicious files. Value type is integer. This feature requires the 'Join Microsoft MAPS' setting enabled in order to function. Possible values are: notConfigured, high, highPlus, zeroTolerance.
public
getDefenderCloudBlockLevel() : DefenderCloudBlockLevelType|null
Return values
DefenderCloudBlockLevelType|null —The defenderCloudBlockLevel
getDefenderCloudExtendedTimeoutInSeconds()
Gets the defenderCloudExtendedTimeoutInSeconds Added in Windows 10, version 1709. This feature allows Windows Defender Antivirus to block a suspicious file for up to 60 seconds, and scan it in the cloud to make sure it's safe. Value type is integer, range is 0 - 50. This feature depends on three other MAPS settings the must all be enabled- 'Configure the 'Block at First Sight' feature; 'Join Microsoft MAPS'; 'Send file samples when further analysis is required'. Valid values 0 to 50
public
getDefenderCloudExtendedTimeoutInSeconds() : int|null
Return values
int|null —The defenderCloudExtendedTimeoutInSeconds
getDefenderDaysBeforeDeletingQuarantinedMalware()
Gets the defenderDaysBeforeDeletingQuarantinedMalware Time period (in days) that quarantine items will be stored on the system. Valid values 0 to 90
public
getDefenderDaysBeforeDeletingQuarantinedMalware() : int|null
Return values
int|null —The defenderDaysBeforeDeletingQuarantinedMalware
getDefenderDetectedMalwareActions()
Gets the defenderDetectedMalwareActions Allows an administrator to specify any valid threat severity levels and the corresponding default action ID to take.
public
getDefenderDetectedMalwareActions() : DefenderDetectedMalwareActions|null
Return values
DefenderDetectedMalwareActions|null —The defenderDetectedMalwareActions
getDefenderDisableBehaviorMonitoring()
Gets the defenderDisableBehaviorMonitoring Allows or disallows Windows Defender Behavior Monitoring functionality.
public
getDefenderDisableBehaviorMonitoring() : bool|null
Return values
bool|null —The defenderDisableBehaviorMonitoring
getDefenderDisableCatchupFullScan()
Gets the defenderDisableCatchupFullScan This policy setting allows you to configure catch-up scans for scheduled full scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time.
public
getDefenderDisableCatchupFullScan() : bool|null
Return values
bool|null —The defenderDisableCatchupFullScan
getDefenderDisableCatchupQuickScan()
Gets the defenderDisableCatchupQuickScan This policy setting allows you to configure catch-up scans for scheduled quick scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time.
public
getDefenderDisableCatchupQuickScan() : bool|null
Return values
bool|null —The defenderDisableCatchupQuickScan
getDefenderDisableCloudProtection()
Gets the defenderDisableCloudProtection To best protect your PC, Windows Defender will send information to Microsoft about any problems it finds. Microsoft will analyze that information, learn more about problems affecting you and other customers, and offer improved solutions.
public
getDefenderDisableCloudProtection() : bool|null
Return values
bool|null —The defenderDisableCloudProtection
getDefenderDisableIntrusionPreventionSystem()
Gets the defenderDisableIntrusionPreventionSystem Allows or disallows Windows Defender Intrusion Prevention functionality.
public
getDefenderDisableIntrusionPreventionSystem() : bool|null
Return values
bool|null —The defenderDisableIntrusionPreventionSystem
getDefenderDisableOnAccessProtection()
Gets the defenderDisableOnAccessProtection Allows or disallows Windows Defender On Access Protection functionality.
public
getDefenderDisableOnAccessProtection() : bool|null
Return values
bool|null —The defenderDisableOnAccessProtection
getDefenderDisableRealTimeMonitoring()
Gets the defenderDisableRealTimeMonitoring Allows or disallows Windows Defender Realtime Monitoring functionality.
public
getDefenderDisableRealTimeMonitoring() : bool|null
Return values
bool|null —The defenderDisableRealTimeMonitoring
getDefenderDisableScanArchiveFiles()
Gets the defenderDisableScanArchiveFiles Allows or disallows scanning of archives.
public
getDefenderDisableScanArchiveFiles() : bool|null
Return values
bool|null —The defenderDisableScanArchiveFiles
getDefenderDisableScanDownloads()
Gets the defenderDisableScanDownloads Allows or disallows Windows Defender IOAVP Protection functionality.
public
getDefenderDisableScanDownloads() : bool|null
Return values
bool|null —The defenderDisableScanDownloads
getDefenderDisableScanNetworkFiles()
Gets the defenderDisableScanNetworkFiles Allows or disallows a scanning of network files.
public
getDefenderDisableScanNetworkFiles() : bool|null
Return values
bool|null —The defenderDisableScanNetworkFiles
getDefenderDisableScanRemovableDrivesDuringFullScan()
Gets the defenderDisableScanRemovableDrivesDuringFullScan Allows or disallows a full scan of removable drives. During a quick scan, removable drives may still be scanned.
public
getDefenderDisableScanRemovableDrivesDuringFullScan() : bool|null
Return values
bool|null —The defenderDisableScanRemovableDrivesDuringFullScan
getDefenderDisableScanScriptsLoadedInInternetExplorer()
Gets the defenderDisableScanScriptsLoadedInInternetExplorer Allows or disallows Windows Defender Script Scanning functionality.
public
getDefenderDisableScanScriptsLoadedInInternetExplorer() : bool|null
Return values
bool|null —The defenderDisableScanScriptsLoadedInInternetExplorer
getDefenderEmailContentExecution()
Gets the defenderEmailContentExecution Value indicating if execution of executable content (exe, dll, ps, js, vbs, etc) should be dropped from email (webmail/mail-client). Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
getDefenderEmailContentExecution() : DefenderProtectionType|null
Return values
DefenderProtectionType|null —The defenderEmailContentExecution
getDefenderEmailContentExecutionType()
Gets the defenderEmailContentExecutionType Value indicating if execution of executable content (exe, dll, ps, js, vbs, etc) should be dropped from email (webmail/mail-client). Possible values are: userDefined, block, auditMode, warn, disable.
public
getDefenderEmailContentExecutionType() : DefenderAttackSurfaceType|null
Return values
DefenderAttackSurfaceType|null —The defenderEmailContentExecutionType
getDefenderEnableLowCpuPriority()
Gets the defenderEnableLowCpuPriority This policy setting allows you to enable or disable low CPU priority for scheduled scans.
public
getDefenderEnableLowCpuPriority() : bool|null
Return values
bool|null —The defenderEnableLowCpuPriority
getDefenderEnableScanIncomingMail()
Gets the defenderEnableScanIncomingMail Allows or disallows scanning of email.
public
getDefenderEnableScanIncomingMail() : bool|null
Return values
bool|null —The defenderEnableScanIncomingMail
getDefenderEnableScanMappedNetworkDrivesDuringFullScan()
Gets the defenderEnableScanMappedNetworkDrivesDuringFullScan Allows or disallows a full scan of mapped network drives.
public
getDefenderEnableScanMappedNetworkDrivesDuringFullScan() : bool|null
Return values
bool|null —The defenderEnableScanMappedNetworkDrivesDuringFullScan
getDefenderExploitProtectionXml()
Gets the defenderExploitProtectionXml Xml content containing information regarding exploit protection details.
public
getDefenderExploitProtectionXml() : Stream|null
Return values
Stream|null —The defenderExploitProtectionXml
getDefenderExploitProtectionXmlFileName()
Gets the defenderExploitProtectionXmlFileName Name of the file from which DefenderExploitProtectionXml was obtained.
public
getDefenderExploitProtectionXmlFileName() : string|null
Return values
string|null —The defenderExploitProtectionXmlFileName
getDefenderFileExtensionsToExclude()
Gets the defenderFileExtensionsToExclude File extensions to exclude from scans and real time protection.
public
getDefenderFileExtensionsToExclude() : string|null
Return values
string|null —The defenderFileExtensionsToExclude
getDefenderFilesAndFoldersToExclude()
Gets the defenderFilesAndFoldersToExclude Files and folder to exclude from scans and real time protection.
public
getDefenderFilesAndFoldersToExclude() : string|null
Return values
string|null —The defenderFilesAndFoldersToExclude
getDefenderGuardedFoldersAllowedAppPaths()
Gets the defenderGuardedFoldersAllowedAppPaths List of paths to exe that are allowed to access protected folders
public
getDefenderGuardedFoldersAllowedAppPaths() : string|null
Return values
string|null —The defenderGuardedFoldersAllowedAppPaths
getDefenderGuardMyFoldersType()
Gets the defenderGuardMyFoldersType Value indicating the behavior of protected folders. Possible values are: userDefined, enable, auditMode, blockDiskModification, auditDiskModification.
public
getDefenderGuardMyFoldersType() : FolderProtectionType|null
Return values
FolderProtectionType|null —The defenderGuardMyFoldersType
getDefenderNetworkProtectionType()
Gets the defenderNetworkProtectionType Value indicating the behavior of NetworkProtection. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
getDefenderNetworkProtectionType() : DefenderProtectionType|null
Return values
DefenderProtectionType|null —The defenderNetworkProtectionType
getDefenderOfficeAppsExecutableContentCreationOrLaunch()
Gets the defenderOfficeAppsExecutableContentCreationOrLaunch Value indicating the behavior of Office applications/macros creating or launching executable content. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
getDefenderOfficeAppsExecutableContentCreationOrLaunch() : DefenderProtectionType|null
Return values
DefenderProtectionType|null —The defenderOfficeAppsExecutableContentCreationOrLaunch
getDefenderOfficeAppsExecutableContentCreationOrLaunchType()
Gets the defenderOfficeAppsExecutableContentCreationOrLaunchType Value indicating the behavior of Office applications/macros creating or launching executable content. Possible values are: userDefined, block, auditMode, warn, disable.
public
getDefenderOfficeAppsExecutableContentCreationOrLaunchType() : DefenderAttackSurfaceType|null
Return values
DefenderAttackSurfaceType|null —The defenderOfficeAppsExecutableContentCreationOrLaunchType
getDefenderOfficeAppsLaunchChildProcess()
Gets the defenderOfficeAppsLaunchChildProcess Value indicating the behavior of Office application launching child processes. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
getDefenderOfficeAppsLaunchChildProcess() : DefenderProtectionType|null
Return values
DefenderProtectionType|null —The defenderOfficeAppsLaunchChildProcess
getDefenderOfficeAppsLaunchChildProcessType()
Gets the defenderOfficeAppsLaunchChildProcessType Value indicating the behavior of Office application launching child processes. Possible values are: userDefined, block, auditMode, warn, disable.
public
getDefenderOfficeAppsLaunchChildProcessType() : DefenderAttackSurfaceType|null
Return values
DefenderAttackSurfaceType|null —The defenderOfficeAppsLaunchChildProcessType
getDefenderOfficeAppsOtherProcessInjection()
Gets the defenderOfficeAppsOtherProcessInjection Value indicating the behavior of Office applications injecting into other processes. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
getDefenderOfficeAppsOtherProcessInjection() : DefenderProtectionType|null
Return values
DefenderProtectionType|null —The defenderOfficeAppsOtherProcessInjection
getDefenderOfficeAppsOtherProcessInjectionType()
Gets the defenderOfficeAppsOtherProcessInjectionType Value indicating the behavior of Office applications injecting into other processes. Possible values are: userDefined, block, auditMode, warn, disable.
public
getDefenderOfficeAppsOtherProcessInjectionType() : DefenderAttackSurfaceType|null
Return values
DefenderAttackSurfaceType|null —The defenderOfficeAppsOtherProcessInjectionType
getDefenderOfficeCommunicationAppsLaunchChildProcess()
Gets the defenderOfficeCommunicationAppsLaunchChildProcess Value indicating the behavior of Office communication applications, including Microsoft Outlook, from creating child processes. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
getDefenderOfficeCommunicationAppsLaunchChildProcess() : DefenderProtectionType|null
Return values
DefenderProtectionType|null —The defenderOfficeCommunicationAppsLaunchChildProcess
getDefenderOfficeMacroCodeAllowWin32Imports()
Gets the defenderOfficeMacroCodeAllowWin32Imports Value indicating the behavior of Win32 imports from Macro code in Office. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
getDefenderOfficeMacroCodeAllowWin32Imports() : DefenderProtectionType|null
Return values
DefenderProtectionType|null —The defenderOfficeMacroCodeAllowWin32Imports
getDefenderOfficeMacroCodeAllowWin32ImportsType()
Gets the defenderOfficeMacroCodeAllowWin32ImportsType Value indicating the behavior of Win32 imports from Macro code in Office. Possible values are: userDefined, block, auditMode, warn, disable.
public
getDefenderOfficeMacroCodeAllowWin32ImportsType() : DefenderAttackSurfaceType|null
Return values
DefenderAttackSurfaceType|null —The defenderOfficeMacroCodeAllowWin32ImportsType
getDefenderPotentiallyUnwantedAppAction()
Gets the defenderPotentiallyUnwantedAppAction Added in Windows 10, version 1607. Specifies the level of detection for potentially unwanted applications (PUAs). Windows Defender alerts you when potentially unwanted software is being downloaded or attempts to install itself on your computer. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
getDefenderPotentiallyUnwantedAppAction() : DefenderProtectionType|null
Return values
DefenderProtectionType|null —The defenderPotentiallyUnwantedAppAction
getDefenderPreventCredentialStealingType()
Gets the defenderPreventCredentialStealingType Value indicating if credential stealing from the Windows local security authority subsystem is permitted. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
getDefenderPreventCredentialStealingType() : DefenderProtectionType|null
Return values
DefenderProtectionType|null —The defenderPreventCredentialStealingType
getDefenderProcessCreation()
Gets the defenderProcessCreation Value indicating response to process creations originating from PSExec and WMI commands. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
getDefenderProcessCreation() : DefenderProtectionType|null
Return values
DefenderProtectionType|null —The defenderProcessCreation
getDefenderProcessCreationType()
Gets the defenderProcessCreationType Value indicating response to process creations originating from PSExec and WMI commands. Possible values are: userDefined, block, auditMode, warn, disable.
public
getDefenderProcessCreationType() : DefenderAttackSurfaceType|null
Return values
DefenderAttackSurfaceType|null —The defenderProcessCreationType
getDefenderProcessesToExclude()
Gets the defenderProcessesToExclude Processes to exclude from scans and real time protection.
public
getDefenderProcessesToExclude() : string|null
Return values
string|null —The defenderProcessesToExclude
getDefenderScanDirection()
Gets the defenderScanDirection Controls which sets of files should be monitored. Possible values are: monitorAllFiles, monitorIncomingFilesOnly, monitorOutgoingFilesOnly.
public
getDefenderScanDirection() : DefenderRealtimeScanDirection|null
Return values
DefenderRealtimeScanDirection|null —The defenderScanDirection
getDefenderScanMaxCpuPercentage()
Gets the defenderScanMaxCpuPercentage Represents the average CPU load factor for the Windows Defender scan (in percent). The default value is 50. Valid values 0 to 100
public
getDefenderScanMaxCpuPercentage() : int|null
Return values
int|null —The defenderScanMaxCpuPercentage
getDefenderScanType()
Gets the defenderScanType Selects whether to perform a quick scan or full scan. Possible values are: userDefined, disabled, quick, full.
public
getDefenderScanType() : DefenderScanType|null
Return values
DefenderScanType|null —The defenderScanType
getDefenderScheduledQuickScanTime()
Gets the defenderScheduledQuickScanTime Selects the time of day that the Windows Defender quick scan should run. For example, a value of 0=12:00AM, a value of 60=1:00AM, a value of 120=2:00, and so on, up to a value of 1380=11:00PM. The default value is 120
public
getDefenderScheduledQuickScanTime() : TimeOfDay|null
Return values
TimeOfDay|null —The defenderScheduledQuickScanTime
getDefenderScheduledScanDay()
Gets the defenderScheduledScanDay Selects the day that the Windows Defender scan should run. Possible values are: userDefined, everyday, sunday, monday, tuesday, wednesday, thursday, friday, saturday, noScheduledScan.
public
getDefenderScheduledScanDay() : WeeklySchedule|null
Return values
WeeklySchedule|null —The defenderScheduledScanDay
getDefenderScheduledScanTime()
Gets the defenderScheduledScanTime Selects the time of day that the Windows Defender scan should run.
public
getDefenderScheduledScanTime() : TimeOfDay|null
Return values
TimeOfDay|null —The defenderScheduledScanTime
getDefenderScriptDownloadedPayloadExecution()
Gets the defenderScriptDownloadedPayloadExecution Value indicating the behavior of js/vbs executing payload downloaded from Internet. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
getDefenderScriptDownloadedPayloadExecution() : DefenderProtectionType|null
Return values
DefenderProtectionType|null —The defenderScriptDownloadedPayloadExecution
getDefenderScriptDownloadedPayloadExecutionType()
Gets the defenderScriptDownloadedPayloadExecutionType Value indicating the behavior of js/vbs executing payload downloaded from Internet. Possible values are: userDefined, block, auditMode, warn, disable.
public
getDefenderScriptDownloadedPayloadExecutionType() : DefenderAttackSurfaceType|null
Return values
DefenderAttackSurfaceType|null —The defenderScriptDownloadedPayloadExecutionType
getDefenderScriptObfuscatedMacroCode()
Gets the defenderScriptObfuscatedMacroCode Value indicating the behavior of obfuscated js/vbs/ps/macro code. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
getDefenderScriptObfuscatedMacroCode() : DefenderProtectionType|null
Return values
DefenderProtectionType|null —The defenderScriptObfuscatedMacroCode
getDefenderScriptObfuscatedMacroCodeType()
Gets the defenderScriptObfuscatedMacroCodeType Value indicating the behavior of obfuscated js/vbs/ps/macro code. Possible values are: userDefined, block, auditMode, warn, disable.
public
getDefenderScriptObfuscatedMacroCodeType() : DefenderAttackSurfaceType|null
Return values
DefenderAttackSurfaceType|null —The defenderScriptObfuscatedMacroCodeType
getDefenderSecurityCenterBlockExploitProtectionOverride()
Gets the defenderSecurityCenterBlockExploitProtectionOverride Indicates whether or not to block user from overriding Exploit Protection settings.
public
getDefenderSecurityCenterBlockExploitProtectionOverride() : bool|null
Return values
bool|null —The defenderSecurityCenterBlockExploitProtectionOverride
getDefenderSecurityCenterDisableAccountUI()
Gets the defenderSecurityCenterDisableAccountUI Used to disable the display of the account protection area.
public
getDefenderSecurityCenterDisableAccountUI() : bool|null
Return values
bool|null —The defenderSecurityCenterDisableAccountUI
getDefenderSecurityCenterDisableAppBrowserUI()
Gets the defenderSecurityCenterDisableAppBrowserUI Used to disable the display of the app and browser protection area.
public
getDefenderSecurityCenterDisableAppBrowserUI() : bool|null
Return values
bool|null —The defenderSecurityCenterDisableAppBrowserUI
getDefenderSecurityCenterDisableClearTpmUI()
Gets the defenderSecurityCenterDisableClearTpmUI Used to disable the display of the Clear TPM button.
public
getDefenderSecurityCenterDisableClearTpmUI() : bool|null
Return values
bool|null —The defenderSecurityCenterDisableClearTpmUI
getDefenderSecurityCenterDisableFamilyUI()
Gets the defenderSecurityCenterDisableFamilyUI Used to disable the display of the family options area.
public
getDefenderSecurityCenterDisableFamilyUI() : bool|null
Return values
bool|null —The defenderSecurityCenterDisableFamilyUI
getDefenderSecurityCenterDisableHardwareUI()
Gets the defenderSecurityCenterDisableHardwareUI Used to disable the display of the hardware protection area.
public
getDefenderSecurityCenterDisableHardwareUI() : bool|null
Return values
bool|null —The defenderSecurityCenterDisableHardwareUI
getDefenderSecurityCenterDisableHealthUI()
Gets the defenderSecurityCenterDisableHealthUI Used to disable the display of the device performance and health area.
public
getDefenderSecurityCenterDisableHealthUI() : bool|null
Return values
bool|null —The defenderSecurityCenterDisableHealthUI
getDefenderSecurityCenterDisableNetworkUI()
Gets the defenderSecurityCenterDisableNetworkUI Used to disable the display of the firewall and network protection area.
public
getDefenderSecurityCenterDisableNetworkUI() : bool|null
Return values
bool|null —The defenderSecurityCenterDisableNetworkUI
getDefenderSecurityCenterDisableNotificationAreaUI()
Gets the defenderSecurityCenterDisableNotificationAreaUI Used to disable the display of the notification area control. The user needs to either sign out and sign in or reboot the computer for this setting to take effect.
public
getDefenderSecurityCenterDisableNotificationAreaUI() : bool|null
Return values
bool|null —The defenderSecurityCenterDisableNotificationAreaUI
getDefenderSecurityCenterDisableRansomwareUI()
Gets the defenderSecurityCenterDisableRansomwareUI Used to disable the display of the ransomware protection area.
public
getDefenderSecurityCenterDisableRansomwareUI() : bool|null
Return values
bool|null —The defenderSecurityCenterDisableRansomwareUI
getDefenderSecurityCenterDisableSecureBootUI()
Gets the defenderSecurityCenterDisableSecureBootUI Used to disable the display of the secure boot area under Device security.
public
getDefenderSecurityCenterDisableSecureBootUI() : bool|null
Return values
bool|null —The defenderSecurityCenterDisableSecureBootUI
getDefenderSecurityCenterDisableTroubleshootingUI()
Gets the defenderSecurityCenterDisableTroubleshootingUI Used to disable the display of the security process troubleshooting under Device security.
public
getDefenderSecurityCenterDisableTroubleshootingUI() : bool|null
Return values
bool|null —The defenderSecurityCenterDisableTroubleshootingUI
getDefenderSecurityCenterDisableVirusUI()
Gets the defenderSecurityCenterDisableVirusUI Used to disable the display of the virus and threat protection area.
public
getDefenderSecurityCenterDisableVirusUI() : bool|null
Return values
bool|null —The defenderSecurityCenterDisableVirusUI
getDefenderSecurityCenterDisableVulnerableTpmFirmwareUpdateUI()
Gets the defenderSecurityCenterDisableVulnerableTpmFirmwareUpdateUI Used to disable the display of update TPM Firmware when a vulnerable firmware is detected.
public
getDefenderSecurityCenterDisableVulnerableTpmFirmwareUpdateUI() : bool|null
Return values
bool|null —The defenderSecurityCenterDisableVulnerableTpmFirmwareUpdateUI
getDefenderSecurityCenterHelpEmail()
Gets the defenderSecurityCenterHelpEmail The email address that is displayed to users.
public
getDefenderSecurityCenterHelpEmail() : string|null
Return values
string|null —The defenderSecurityCenterHelpEmail
getDefenderSecurityCenterHelpPhone()
Gets the defenderSecurityCenterHelpPhone The phone number or Skype ID that is displayed to users.
public
getDefenderSecurityCenterHelpPhone() : string|null
Return values
string|null —The defenderSecurityCenterHelpPhone
getDefenderSecurityCenterHelpURL()
Gets the defenderSecurityCenterHelpURL The help portal URL this is displayed to users.
public
getDefenderSecurityCenterHelpURL() : string|null
Return values
string|null —The defenderSecurityCenterHelpURL
getDefenderSecurityCenterITContactDisplay()
Gets the defenderSecurityCenterITContactDisplay Configure where to display IT contact information to end users. Possible values are: notConfigured, displayInAppAndInNotifications, displayOnlyInApp, displayOnlyInNotifications.
public
getDefenderSecurityCenterITContactDisplay() : DefenderSecurityCenterITContactDisplayType|null
Return values
DefenderSecurityCenterITContactDisplayType|null —The defenderSecurityCenterITContactDisplay
getDefenderSecurityCenterNotificationsFromApp()
Gets the defenderSecurityCenterNotificationsFromApp Notifications to show from the displayed areas of app. Possible values are: notConfigured, blockNoncriticalNotifications, blockAllNotifications.
public
getDefenderSecurityCenterNotificationsFromApp() : DefenderSecurityCenterNotificationsFromAppType|null
Return values
DefenderSecurityCenterNotificationsFromAppType|null —The defenderSecurityCenterNotificationsFromApp
getDefenderSecurityCenterOrganizationDisplayName()
Gets the defenderSecurityCenterOrganizationDisplayName The company name that is displayed to the users.
public
getDefenderSecurityCenterOrganizationDisplayName() : string|null
Return values
string|null —The defenderSecurityCenterOrganizationDisplayName
getDefenderSignatureUpdateIntervalInHours()
Gets the defenderSignatureUpdateIntervalInHours Specifies the interval (in hours) that will be used to check for signatures, so instead of using the ScheduleDay and ScheduleTime the check for new signatures will be set according to the interval. Valid values 0 to 24
public
getDefenderSignatureUpdateIntervalInHours() : int|null
Return values
int|null —The defenderSignatureUpdateIntervalInHours
getDefenderSubmitSamplesConsentType()
Gets the defenderSubmitSamplesConsentType Checks for the user consent level in Windows Defender to send data. Possible values are: sendSafeSamplesAutomatically, alwaysPrompt, neverSend, sendAllSamplesAutomatically.
public
getDefenderSubmitSamplesConsentType() : DefenderSubmitSamplesConsentType|null
Return values
DefenderSubmitSamplesConsentType|null —The defenderSubmitSamplesConsentType
getDefenderUntrustedExecutable()
Gets the defenderUntrustedExecutable Value indicating response to executables that don't meet a prevalence, age, or trusted list criteria. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
getDefenderUntrustedExecutable() : DefenderProtectionType|null
Return values
DefenderProtectionType|null —The defenderUntrustedExecutable
getDefenderUntrustedExecutableType()
Gets the defenderUntrustedExecutableType Value indicating response to executables that don't meet a prevalence, age, or trusted list criteria. Possible values are: userDefined, block, auditMode, warn, disable.
public
getDefenderUntrustedExecutableType() : DefenderAttackSurfaceType|null
Return values
DefenderAttackSurfaceType|null —The defenderUntrustedExecutableType
getDefenderUntrustedUSBProcess()
Gets the defenderUntrustedUSBProcess Value indicating response to untrusted and unsigned processes that run from USB. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
getDefenderUntrustedUSBProcess() : DefenderProtectionType|null
Return values
DefenderProtectionType|null —The defenderUntrustedUSBProcess
getDefenderUntrustedUSBProcessType()
Gets the defenderUntrustedUSBProcessType Value indicating response to untrusted and unsigned processes that run from USB. Possible values are: userDefined, block, auditMode, warn, disable.
public
getDefenderUntrustedUSBProcessType() : DefenderAttackSurfaceType|null
Return values
DefenderAttackSurfaceType|null —The defenderUntrustedUSBProcessType
getDescription()
Gets the description Admin provided description of the Device Configuration.
public
getDescription() : string|null
Return values
string|null —The description
getDeviceGuardEnableSecureBootWithDMA()
Gets the deviceGuardEnableSecureBootWithDMA This property will be deprecated in May 2019 and will be replaced with property DeviceGuardSecureBootWithDMA. Specifies whether Platform Security Level is enabled at next reboot.
public
getDeviceGuardEnableSecureBootWithDMA() : bool|null
Return values
bool|null —The deviceGuardEnableSecureBootWithDMA
getDeviceGuardEnableVirtualizationBasedSecurity()
Gets the deviceGuardEnableVirtualizationBasedSecurity Turns On Virtualization Based Security(VBS).
public
getDeviceGuardEnableVirtualizationBasedSecurity() : bool|null
Return values
bool|null —The deviceGuardEnableVirtualizationBasedSecurity
getDeviceGuardLaunchSystemGuard()
Gets the deviceGuardLaunchSystemGuard Allows the IT admin to configure the launch of System Guard. Possible values are: notConfigured, enabled, disabled.
public
getDeviceGuardLaunchSystemGuard() : Enablement|null
Return values
Enablement|null —The deviceGuardLaunchSystemGuard
getDeviceGuardLocalSystemAuthorityCredentialGuardSettings()
Gets the deviceGuardLocalSystemAuthorityCredentialGuardSettings Turn on Credential Guard when Platform Security Level with Secure Boot and Virtualization Based Security are both enabled. Possible values are: notConfigured, enableWithUEFILock, enableWithoutUEFILock, disable.
public
getDeviceGuardLocalSystemAuthorityCredentialGuardSettings() : DeviceGuardLocalSystemAuthorityCredentialGuardType|null
Return values
DeviceGuardLocalSystemAuthorityCredentialGuardType|null —The deviceGuardLocalSystemAuthorityCredentialGuardSettings
getDeviceGuardSecureBootWithDMA()
Gets the deviceGuardSecureBootWithDMA Specifies whether Platform Security Level is enabled at next reboot. Possible values are: notConfigured, withoutDMA, withDMA.
public
getDeviceGuardSecureBootWithDMA() : SecureBootWithDMAType|null
Return values
SecureBootWithDMAType|null —The deviceGuardSecureBootWithDMA
getDeviceManagementApplicabilityRuleDeviceMode()
Gets the deviceManagementApplicabilityRuleDeviceMode The device mode applicability rule for this Policy.
public
getDeviceManagementApplicabilityRuleDeviceMode() : DeviceManagementApplicabilityRuleDeviceMode|null
Return values
DeviceManagementApplicabilityRuleDeviceMode|null —The deviceManagementApplicabilityRuleDeviceMode
getDeviceManagementApplicabilityRuleOsEdition()
Gets the deviceManagementApplicabilityRuleOsEdition The OS edition applicability for this Policy.
public
getDeviceManagementApplicabilityRuleOsEdition() : DeviceManagementApplicabilityRuleOsEdition|null
Return values
DeviceManagementApplicabilityRuleOsEdition|null —The deviceManagementApplicabilityRuleOsEdition
getDeviceManagementApplicabilityRuleOsVersion()
Gets the deviceManagementApplicabilityRuleOsVersion The OS version applicability rule for this Policy.
public
getDeviceManagementApplicabilityRuleOsVersion() : DeviceManagementApplicabilityRuleOsVersion|null
Return values
DeviceManagementApplicabilityRuleOsVersion|null —The deviceManagementApplicabilityRuleOsVersion
getDeviceSettingStateSummaries()
Gets the deviceSettingStateSummaries Device Configuration Setting State Device Summary
public
getDeviceSettingStateSummaries() : array<string|int, mixed>|null
Return values
array<string|int, mixed>|null —The deviceSettingStateSummaries
getDeviceStatuses()
Gets the deviceStatuses Device configuration installation status by device.
public
getDeviceStatuses() : array<string|int, mixed>|null
Return values
array<string|int, mixed>|null —The deviceStatuses
getDeviceStatusOverview()
Gets the deviceStatusOverview Device Configuration devices status overview
public
getDeviceStatusOverview() : DeviceConfigurationDeviceOverview|null
Return values
DeviceConfigurationDeviceOverview|null —The deviceStatusOverview
getDisplayName()
Gets the displayName Admin provided name of the device configuration.
public
getDisplayName() : string|null
Return values
string|null —The displayName
getDmaGuardDeviceEnumerationPolicy()
Gets the dmaGuardDeviceEnumerationPolicy This policy is intended to provide additional security against external DMA capable devices. It allows for more control over the enumeration of external DMA capable devices incompatible with DMA Remapping/device memory isolation and sandboxing. This policy only takes effect when Kernel DMA Protection is supported and enabled by the system firmware. Kernel DMA Protection is a platform feature that cannot be controlled via policy or by end user. It has to be supported by the system at the time of manufacturing. To check if the system supports Kernel DMA Protection, please check the Kernel DMA Protection field in the Summary page of MSINFO32.exe.
public
getDmaGuardDeviceEnumerationPolicy() : DmaGuardDeviceEnumerationPolicyType|null
Return values
DmaGuardDeviceEnumerationPolicyType|null —The dmaGuardDeviceEnumerationPolicy
getFirewallBlockStatefulFTP()
Gets the firewallBlockStatefulFTP Blocks stateful FTP connections to the device
public
getFirewallBlockStatefulFTP() : bool|null
Return values
bool|null —The firewallBlockStatefulFTP
getFirewallCertificateRevocationListCheckMethod()
Gets the firewallCertificateRevocationListCheckMethod Specify how the certificate revocation list is to be enforced. Possible values are: deviceDefault, none, attempt, require.
public
getFirewallCertificateRevocationListCheckMethod() : FirewallCertificateRevocationListCheckMethodType|null
Return values
FirewallCertificateRevocationListCheckMethodType|null —The firewallCertificateRevocationListCheckMethod
getFirewallIdleTimeoutForSecurityAssociationInSeconds()
Gets the firewallIdleTimeoutForSecurityAssociationInSeconds Configures the idle timeout for security associations, in seconds, from 300 to 3600 inclusive. This is the period after which security associations will expire and be deleted. Valid values 300 to 3600
public
getFirewallIdleTimeoutForSecurityAssociationInSeconds() : int|null
Return values
int|null —The firewallIdleTimeoutForSecurityAssociationInSeconds
getFirewallIPSecExemptionsAllowDHCP()
Gets the firewallIPSecExemptionsAllowDHCP Configures IPSec exemptions to allow both IPv4 and IPv6 DHCP traffic
public
getFirewallIPSecExemptionsAllowDHCP() : bool|null
Return values
bool|null —The firewallIPSecExemptionsAllowDHCP
getFirewallIPSecExemptionsAllowICMP()
Gets the firewallIPSecExemptionsAllowICMP Configures IPSec exemptions to allow ICMP
public
getFirewallIPSecExemptionsAllowICMP() : bool|null
Return values
bool|null —The firewallIPSecExemptionsAllowICMP
getFirewallIPSecExemptionsAllowNeighborDiscovery()
Gets the firewallIPSecExemptionsAllowNeighborDiscovery Configures IPSec exemptions to allow neighbor discovery IPv6 ICMP type-codes
public
getFirewallIPSecExemptionsAllowNeighborDiscovery() : bool|null
Return values
bool|null —The firewallIPSecExemptionsAllowNeighborDiscovery
getFirewallIPSecExemptionsAllowRouterDiscovery()
Gets the firewallIPSecExemptionsAllowRouterDiscovery Configures IPSec exemptions to allow router discovery IPv6 ICMP type-codes
public
getFirewallIPSecExemptionsAllowRouterDiscovery() : bool|null
Return values
bool|null —The firewallIPSecExemptionsAllowRouterDiscovery
getFirewallIPSecExemptionsNone()
Gets the firewallIPSecExemptionsNone Configures IPSec exemptions to no exemptions
public
getFirewallIPSecExemptionsNone() : bool|null
Return values
bool|null —The firewallIPSecExemptionsNone
getFirewallMergeKeyingModuleSettings()
Gets the firewallMergeKeyingModuleSettings If an authentication set is not fully supported by a keying module, direct the module to ignore only unsupported authentication suites rather than the entire set
public
getFirewallMergeKeyingModuleSettings() : bool|null
Return values
bool|null —The firewallMergeKeyingModuleSettings
getFirewallPacketQueueingMethod()
Gets the firewallPacketQueueingMethod Configures how packet queueing should be applied in the tunnel gateway scenario. Possible values are: deviceDefault, disabled, queueInbound, queueOutbound, queueBoth.
public
getFirewallPacketQueueingMethod() : FirewallPacketQueueingMethodType|null
Return values
FirewallPacketQueueingMethodType|null —The firewallPacketQueueingMethod
getFirewallPreSharedKeyEncodingMethod()
Gets the firewallPreSharedKeyEncodingMethod Select the preshared key encoding to be used. Possible values are: deviceDefault, none, utF8.
public
getFirewallPreSharedKeyEncodingMethod() : FirewallPreSharedKeyEncodingMethodType|null
Return values
FirewallPreSharedKeyEncodingMethodType|null —The firewallPreSharedKeyEncodingMethod
getFirewallProfileDomain()
Gets the firewallProfileDomain Configures the firewall profile settings for domain networks
public
getFirewallProfileDomain() : WindowsFirewallNetworkProfile|null
Return values
WindowsFirewallNetworkProfile|null —The firewallProfileDomain
getFirewallProfilePrivate()
Gets the firewallProfilePrivate Configures the firewall profile settings for private networks
public
getFirewallProfilePrivate() : WindowsFirewallNetworkProfile|null
Return values
WindowsFirewallNetworkProfile|null —The firewallProfilePrivate
getFirewallProfilePublic()
Gets the firewallProfilePublic Configures the firewall profile settings for public networks
public
getFirewallProfilePublic() : WindowsFirewallNetworkProfile|null
Return values
WindowsFirewallNetworkProfile|null —The firewallProfilePublic
getFirewallRules()
Gets the firewallRules Configures the firewall rule settings. This collection can contain a maximum of 150 elements.
public
getFirewallRules() : array<string|int, mixed>|null
Return values
array<string|int, mixed>|null —The firewallRules
getGroupAssignments()
Gets the groupAssignments The list of group assignments for the device configuration profile.
public
getGroupAssignments() : array<string|int, mixed>|null
Return values
array<string|int, mixed>|null —The groupAssignments
getId()
Gets the id Read-only.
public
getId() : string|null
Return values
string|null —The id
getLanManagerAuthenticationLevel()
Gets the lanManagerAuthenticationLevel This security setting determines which challenge/response authentication protocol is used for network logons. Possible values are: lmAndNltm, lmNtlmAndNtlmV2, lmAndNtlmOnly, lmAndNtlmV2, lmNtlmV2AndNotLm, lmNtlmV2AndNotLmOrNtm.
public
getLanManagerAuthenticationLevel() : LanManagerAuthenticationLevel|null
Return values
LanManagerAuthenticationLevel|null —The lanManagerAuthenticationLevel
getLanManagerWorkstationDisableInsecureGuestLogons()
Gets the lanManagerWorkstationDisableInsecureGuestLogons If enabled,the SMB client will allow insecure guest logons. If not configured, the SMB client will reject insecure guest logons.
public
getLanManagerWorkstationDisableInsecureGuestLogons() : bool|null
Return values
bool|null —The lanManagerWorkstationDisableInsecureGuestLogons
getLastModifiedDateTime()
Gets the lastModifiedDateTime DateTime the object was last modified.
public
getLastModifiedDateTime() : DateTime|null
Return values
DateTime|null —The lastModifiedDateTime
getLocalSecurityOptionsAdministratorAccountName()
Gets the localSecurityOptionsAdministratorAccountName Define a different account name to be associated with the security identifier (SID) for the account 'Administrator'.
public
getLocalSecurityOptionsAdministratorAccountName() : string|null
Return values
string|null —The localSecurityOptionsAdministratorAccountName
getLocalSecurityOptionsAdministratorElevationPromptBehavior()
Gets the localSecurityOptionsAdministratorElevationPromptBehavior Define the behavior of the elevation prompt for admins in Admin Approval Mode. Possible values are: notConfigured, elevateWithoutPrompting, promptForCredentialsOnTheSecureDesktop, promptForConsentOnTheSecureDesktop, promptForCredentials, promptForConsent, promptForConsentForNonWindowsBinaries.
public
getLocalSecurityOptionsAdministratorElevationPromptBehavior() : LocalSecurityOptionsAdministratorElevationPromptBehaviorType|null
Return values
LocalSecurityOptionsAdministratorElevationPromptBehaviorType|null —The localSecurityOptionsAdministratorElevationPromptBehavior
getLocalSecurityOptionsAllowAnonymousEnumerationOfSAMAccountsAndShares()
Gets the localSecurityOptionsAllowAnonymousEnumerationOfSAMAccountsAndShares This security setting determines whether to allows anonymous users to perform certain activities, such as enumerating the names of domain accounts and network shares.
public
getLocalSecurityOptionsAllowAnonymousEnumerationOfSAMAccountsAndShares() : bool|null
Return values
bool|null —The localSecurityOptionsAllowAnonymousEnumerationOfSAMAccountsAndShares
getLocalSecurityOptionsAllowPKU2UAuthenticationRequests()
Gets the localSecurityOptionsAllowPKU2UAuthenticationRequests Block PKU2U authentication requests to this device to use online identities.
public
getLocalSecurityOptionsAllowPKU2UAuthenticationRequests() : bool|null
Return values
bool|null —The localSecurityOptionsAllowPKU2UAuthenticationRequests
getLocalSecurityOptionsAllowRemoteCallsToSecurityAccountsManager()
Gets the localSecurityOptionsAllowRemoteCallsToSecurityAccountsManager Edit the default Security Descriptor Definition Language string to allow or deny users and groups to make remote calls to the SAM.
public
getLocalSecurityOptionsAllowRemoteCallsToSecurityAccountsManager() : string|null
Return values
string|null —The localSecurityOptionsAllowRemoteCallsToSecurityAccountsManager
getLocalSecurityOptionsAllowRemoteCallsToSecurityAccountsManagerHelperBool()
Gets the localSecurityOptionsAllowRemoteCallsToSecurityAccountsManagerHelperBool UI helper boolean for LocalSecurityOptionsAllowRemoteCallsToSecurityAccountsManager entity
public
getLocalSecurityOptionsAllowRemoteCallsToSecurityAccountsManagerHelperBool() : bool|null
Return values
bool|null —The localSecurityOptionsAllowRemoteCallsToSecurityAccountsManagerHelperBool
getLocalSecurityOptionsAllowSystemToBeShutDownWithoutHavingToLogOn()
Gets the localSecurityOptionsAllowSystemToBeShutDownWithoutHavingToLogOn This security setting determines whether a computer can be shut down without having to log on to Windows.
public
getLocalSecurityOptionsAllowSystemToBeShutDownWithoutHavingToLogOn() : bool|null
Return values
bool|null —The localSecurityOptionsAllowSystemToBeShutDownWithoutHavingToLogOn
getLocalSecurityOptionsAllowUIAccessApplicationElevation()
Gets the localSecurityOptionsAllowUIAccessApplicationElevation Allow UIAccess apps to prompt for elevation without using the secure desktop.
public
getLocalSecurityOptionsAllowUIAccessApplicationElevation() : bool|null
Return values
bool|null —The localSecurityOptionsAllowUIAccessApplicationElevation
getLocalSecurityOptionsAllowUIAccessApplicationsForSecureLocations()
Gets the localSecurityOptionsAllowUIAccessApplicationsForSecureLocations Allow UIAccess apps to prompt for elevation without using the secure desktop.Default is enabled
public
getLocalSecurityOptionsAllowUIAccessApplicationsForSecureLocations() : bool|null
Return values
bool|null —The localSecurityOptionsAllowUIAccessApplicationsForSecureLocations
getLocalSecurityOptionsAllowUndockWithoutHavingToLogon()
Gets the localSecurityOptionsAllowUndockWithoutHavingToLogon Prevent a portable computer from being undocked without having to log in.
public
getLocalSecurityOptionsAllowUndockWithoutHavingToLogon() : bool|null
Return values
bool|null —The localSecurityOptionsAllowUndockWithoutHavingToLogon
getLocalSecurityOptionsBlockMicrosoftAccounts()
Gets the localSecurityOptionsBlockMicrosoftAccounts Prevent users from adding new Microsoft accounts to this computer.
public
getLocalSecurityOptionsBlockMicrosoftAccounts() : bool|null
Return values
bool|null —The localSecurityOptionsBlockMicrosoftAccounts
getLocalSecurityOptionsBlockRemoteLogonWithBlankPassword()
Gets the localSecurityOptionsBlockRemoteLogonWithBlankPassword Enable Local accounts that are not password protected to log on from locations other than the physical device.Default is enabled
public
getLocalSecurityOptionsBlockRemoteLogonWithBlankPassword() : bool|null
Return values
bool|null —The localSecurityOptionsBlockRemoteLogonWithBlankPassword
getLocalSecurityOptionsBlockRemoteOpticalDriveAccess()
Gets the localSecurityOptionsBlockRemoteOpticalDriveAccess Enabling this settings allows only interactively logged on user to access CD-ROM media.
public
getLocalSecurityOptionsBlockRemoteOpticalDriveAccess() : bool|null
Return values
bool|null —The localSecurityOptionsBlockRemoteOpticalDriveAccess
getLocalSecurityOptionsBlockUsersInstallingPrinterDrivers()
Gets the localSecurityOptionsBlockUsersInstallingPrinterDrivers Restrict installing printer drivers as part of connecting to a shared printer to admins only.
public
getLocalSecurityOptionsBlockUsersInstallingPrinterDrivers() : bool|null
Return values
bool|null —The localSecurityOptionsBlockUsersInstallingPrinterDrivers
getLocalSecurityOptionsClearVirtualMemoryPageFile()
Gets the localSecurityOptionsClearVirtualMemoryPageFile This security setting determines whether the virtual memory pagefile is cleared when the system is shut down.
public
getLocalSecurityOptionsClearVirtualMemoryPageFile() : bool|null
Return values
bool|null —The localSecurityOptionsClearVirtualMemoryPageFile
getLocalSecurityOptionsClientDigitallySignCommunicationsAlways()
Gets the localSecurityOptionsClientDigitallySignCommunicationsAlways This security setting determines whether packet signing is required by the SMB client component.
public
getLocalSecurityOptionsClientDigitallySignCommunicationsAlways() : bool|null
Return values
bool|null —The localSecurityOptionsClientDigitallySignCommunicationsAlways
getLocalSecurityOptionsClientSendUnencryptedPasswordToThirdPartySMBServers()
Gets the localSecurityOptionsClientSendUnencryptedPasswordToThirdPartySMBServers If this security setting is enabled, the Server Message Block (SMB) redirector is allowed to send plaintext passwords to non-Microsoft SMB servers that do not support password encryption during authentication.
public
getLocalSecurityOptionsClientSendUnencryptedPasswordToThirdPartySMBServers() : bool|null
Return values
bool|null —The localSecurityOptionsClientSendUnencryptedPasswordToThirdPartySMBServers
getLocalSecurityOptionsDetectApplicationInstallationsAndPromptForElevation()
Gets the localSecurityOptionsDetectApplicationInstallationsAndPromptForElevation App installations requiring elevated privileges will prompt for admin credentials.Default is enabled
public
getLocalSecurityOptionsDetectApplicationInstallationsAndPromptForElevation() : bool|null
Return values
bool|null —The localSecurityOptionsDetectApplicationInstallationsAndPromptForElevation
getLocalSecurityOptionsDisableAdministratorAccount()
Gets the localSecurityOptionsDisableAdministratorAccount Determines whether the Local Administrator account is enabled or disabled.
public
getLocalSecurityOptionsDisableAdministratorAccount() : bool|null
Return values
bool|null —The localSecurityOptionsDisableAdministratorAccount
getLocalSecurityOptionsDisableClientDigitallySignCommunicationsIfServerAgrees()
Gets the localSecurityOptionsDisableClientDigitallySignCommunicationsIfServerAgrees This security setting determines whether the SMB client attempts to negotiate SMB packet signing.
public
getLocalSecurityOptionsDisableClientDigitallySignCommunicationsIfServerAgrees() : bool|null
Return values
bool|null —The localSecurityOptionsDisableClientDigitallySignCommunicationsIfServerAgrees
getLocalSecurityOptionsDisableGuestAccount()
Gets the localSecurityOptionsDisableGuestAccount Determines if the Guest account is enabled or disabled.
public
getLocalSecurityOptionsDisableGuestAccount() : bool|null
Return values
bool|null —The localSecurityOptionsDisableGuestAccount
getLocalSecurityOptionsDisableServerDigitallySignCommunicationsAlways()
Gets the localSecurityOptionsDisableServerDigitallySignCommunicationsAlways This security setting determines whether packet signing is required by the SMB server component.
public
getLocalSecurityOptionsDisableServerDigitallySignCommunicationsAlways() : bool|null
Return values
bool|null —The localSecurityOptionsDisableServerDigitallySignCommunicationsAlways
getLocalSecurityOptionsDisableServerDigitallySignCommunicationsIfClientAgrees()
Gets the localSecurityOptionsDisableServerDigitallySignCommunicationsIfClientAgrees This security setting determines whether the SMB server will negotiate SMB packet signing with clients that request it.
public
getLocalSecurityOptionsDisableServerDigitallySignCommunicationsIfClientAgrees() : bool|null
Return values
bool|null —The localSecurityOptionsDisableServerDigitallySignCommunicationsIfClientAgrees
getLocalSecurityOptionsDoNotAllowAnonymousEnumerationOfSAMAccounts()
Gets the localSecurityOptionsDoNotAllowAnonymousEnumerationOfSAMAccounts This security setting determines what additional permissions will be granted for anonymous connections to the computer.
public
getLocalSecurityOptionsDoNotAllowAnonymousEnumerationOfSAMAccounts() : bool|null
Return values
bool|null —The localSecurityOptionsDoNotAllowAnonymousEnumerationOfSAMAccounts
getLocalSecurityOptionsDoNotRequireCtrlAltDel()
Gets the localSecurityOptionsDoNotRequireCtrlAltDel Require CTRL+ALT+DEL to be pressed before a user can log on.
public
getLocalSecurityOptionsDoNotRequireCtrlAltDel() : bool|null
Return values
bool|null —The localSecurityOptionsDoNotRequireCtrlAltDel
getLocalSecurityOptionsDoNotStoreLANManagerHashValueOnNextPasswordChange()
Gets the localSecurityOptionsDoNotStoreLANManagerHashValueOnNextPasswordChange This security setting determines if, at the next password change, the LAN Manager (LM) hash value for the new password is stored. It’s not stored by default.
public
getLocalSecurityOptionsDoNotStoreLANManagerHashValueOnNextPasswordChange() : bool|null
Return values
bool|null —The localSecurityOptionsDoNotStoreLANManagerHashValueOnNextPasswordChange
getLocalSecurityOptionsFormatAndEjectOfRemovableMediaAllowedUser()
Gets the localSecurityOptionsFormatAndEjectOfRemovableMediaAllowedUser Define who is allowed to format and eject removable NTFS media. Possible values are: notConfigured, administrators, administratorsAndPowerUsers, administratorsAndInteractiveUsers.
public
getLocalSecurityOptionsFormatAndEjectOfRemovableMediaAllowedUser() : LocalSecurityOptionsFormatAndEjectOfRemovableMediaAllowedUserType|null
Return values
LocalSecurityOptionsFormatAndEjectOfRemovableMediaAllowedUserType|null —The localSecurityOptionsFormatAndEjectOfRemovableMediaAllowedUser
getLocalSecurityOptionsGuestAccountName()
Gets the localSecurityOptionsGuestAccountName Define a different account name to be associated with the security identifier (SID) for the account 'Guest'.
public
getLocalSecurityOptionsGuestAccountName() : string|null
Return values
string|null —The localSecurityOptionsGuestAccountName
getLocalSecurityOptionsHideLastSignedInUser()
Gets the localSecurityOptionsHideLastSignedInUser Do not display the username of the last person who signed in on this device.
public
getLocalSecurityOptionsHideLastSignedInUser() : bool|null
Return values
bool|null —The localSecurityOptionsHideLastSignedInUser
getLocalSecurityOptionsHideUsernameAtSignIn()
Gets the localSecurityOptionsHideUsernameAtSignIn Do not display the username of the person signing in to this device after credentials are entered and before the device’s desktop is shown.
public
getLocalSecurityOptionsHideUsernameAtSignIn() : bool|null
Return values
bool|null —The localSecurityOptionsHideUsernameAtSignIn
getLocalSecurityOptionsInformationDisplayedOnLockScreen()
Gets the localSecurityOptionsInformationDisplayedOnLockScreen Configure the user information that is displayed when the session is locked. If not configured, user display name, domain and username are shown. Possible values are: notConfigured, administrators, administratorsAndPowerUsers, administratorsAndInteractiveUsers.
public
getLocalSecurityOptionsInformationDisplayedOnLockScreen() : LocalSecurityOptionsInformationDisplayedOnLockScreenType|null
Return values
LocalSecurityOptionsInformationDisplayedOnLockScreenType|null —The localSecurityOptionsInformationDisplayedOnLockScreen
getLocalSecurityOptionsInformationShownOnLockScreen()
Gets the localSecurityOptionsInformationShownOnLockScreen Configure the user information that is displayed when the session is locked. If not configured, user display name, domain and username are shown. Possible values are: notConfigured, userDisplayNameDomainUser, userDisplayNameOnly, doNotDisplayUser.
public
getLocalSecurityOptionsInformationShownOnLockScreen() : LocalSecurityOptionsInformationShownOnLockScreenType|null
Return values
LocalSecurityOptionsInformationShownOnLockScreenType|null —The localSecurityOptionsInformationShownOnLockScreen
getLocalSecurityOptionsLogOnMessageText()
Gets the localSecurityOptionsLogOnMessageText Set message text for users attempting to log in.
public
getLocalSecurityOptionsLogOnMessageText() : string|null
Return values
string|null —The localSecurityOptionsLogOnMessageText
getLocalSecurityOptionsLogOnMessageTitle()
Gets the localSecurityOptionsLogOnMessageTitle Set message title for users attempting to log in.
public
getLocalSecurityOptionsLogOnMessageTitle() : string|null
Return values
string|null —The localSecurityOptionsLogOnMessageTitle
getLocalSecurityOptionsMachineInactivityLimit()
Gets the localSecurityOptionsMachineInactivityLimit Define maximum minutes of inactivity on the interactive desktop’s login screen until the screen saver runs. Valid values 0 to 9999
public
getLocalSecurityOptionsMachineInactivityLimit() : int|null
Return values
int|null —The localSecurityOptionsMachineInactivityLimit
getLocalSecurityOptionsMachineInactivityLimitInMinutes()
Gets the localSecurityOptionsMachineInactivityLimitInMinutes Define maximum minutes of inactivity on the interactive desktop’s login screen until the screen saver runs. Valid values 0 to 9999
public
getLocalSecurityOptionsMachineInactivityLimitInMinutes() : int|null
Return values
int|null —The localSecurityOptionsMachineInactivityLimitInMinutes
getLocalSecurityOptionsMinimumSessionSecurityForNtlmSspBasedClients()
Gets the localSecurityOptionsMinimumSessionSecurityForNtlmSspBasedClients This security setting allows a client to require the negotiation of 128-bit encryption and/or NTLMv2 session security. Possible values are: none, requireNtmlV2SessionSecurity, require128BitEncryption, ntlmV2And128BitEncryption.
public
getLocalSecurityOptionsMinimumSessionSecurityForNtlmSspBasedClients() : LocalSecurityOptionsMinimumSessionSecurity|null
Return values
LocalSecurityOptionsMinimumSessionSecurity|null —The localSecurityOptionsMinimumSessionSecurityForNtlmSspBasedClients
getLocalSecurityOptionsMinimumSessionSecurityForNtlmSspBasedServers()
Gets the localSecurityOptionsMinimumSessionSecurityForNtlmSspBasedServers This security setting allows a server to require the negotiation of 128-bit encryption and/or NTLMv2 session security. Possible values are: none, requireNtmlV2SessionSecurity, require128BitEncryption, ntlmV2And128BitEncryption.
public
getLocalSecurityOptionsMinimumSessionSecurityForNtlmSspBasedServers() : LocalSecurityOptionsMinimumSessionSecurity|null
Return values
LocalSecurityOptionsMinimumSessionSecurity|null —The localSecurityOptionsMinimumSessionSecurityForNtlmSspBasedServers
getLocalSecurityOptionsOnlyElevateSignedExecutables()
Gets the localSecurityOptionsOnlyElevateSignedExecutables Enforce PKI certification path validation for a given executable file before it is permitted to run.
public
getLocalSecurityOptionsOnlyElevateSignedExecutables() : bool|null
Return values
bool|null —The localSecurityOptionsOnlyElevateSignedExecutables
getLocalSecurityOptionsRestrictAnonymousAccessToNamedPipesAndShares()
Gets the localSecurityOptionsRestrictAnonymousAccessToNamedPipesAndShares By default, this security setting restricts anonymous access to shares and pipes to the settings for named pipes that can be accessed anonymously and Shares that can be accessed anonymously
public
getLocalSecurityOptionsRestrictAnonymousAccessToNamedPipesAndShares() : bool|null
Return values
bool|null —The localSecurityOptionsRestrictAnonymousAccessToNamedPipesAndShares
getLocalSecurityOptionsSmartCardRemovalBehavior()
Gets the localSecurityOptionsSmartCardRemovalBehavior This security setting determines what happens when the smart card for a logged-on user is removed from the smart card reader. Possible values are: lockWorkstation, noAction, forceLogoff, disconnectRemoteDesktopSession.
public
getLocalSecurityOptionsSmartCardRemovalBehavior() : LocalSecurityOptionsSmartCardRemovalBehaviorType|null
Return values
LocalSecurityOptionsSmartCardRemovalBehaviorType|null —The localSecurityOptionsSmartCardRemovalBehavior
getLocalSecurityOptionsStandardUserElevationPromptBehavior()
Gets the localSecurityOptionsStandardUserElevationPromptBehavior Define the behavior of the elevation prompt for standard users. Possible values are: notConfigured, automaticallyDenyElevationRequests, promptForCredentialsOnTheSecureDesktop, promptForCredentials.
public
getLocalSecurityOptionsStandardUserElevationPromptBehavior() : LocalSecurityOptionsStandardUserElevationPromptBehaviorType|null
Return values
LocalSecurityOptionsStandardUserElevationPromptBehaviorType|null —The localSecurityOptionsStandardUserElevationPromptBehavior
getLocalSecurityOptionsSwitchToSecureDesktopWhenPromptingForElevation()
Gets the localSecurityOptionsSwitchToSecureDesktopWhenPromptingForElevation Enable all elevation requests to go to the interactive user's desktop rather than the secure desktop. Prompt behavior policy settings for admins and standard users are used.
public
getLocalSecurityOptionsSwitchToSecureDesktopWhenPromptingForElevation() : bool|null
Return values
bool|null —The localSecurityOptionsSwitchToSecureDesktopWhenPromptingForElevation
getLocalSecurityOptionsUseAdminApprovalMode()
Gets the localSecurityOptionsUseAdminApprovalMode Defines whether the built-in admin account uses Admin Approval Mode or runs all apps with full admin privileges.Default is enabled
public
getLocalSecurityOptionsUseAdminApprovalMode() : bool|null
Return values
bool|null —The localSecurityOptionsUseAdminApprovalMode
getLocalSecurityOptionsUseAdminApprovalModeForAdministrators()
Gets the localSecurityOptionsUseAdminApprovalModeForAdministrators Define whether Admin Approval Mode and all UAC policy settings are enabled, default is enabled
public
getLocalSecurityOptionsUseAdminApprovalModeForAdministrators() : bool|null
Return values
bool|null —The localSecurityOptionsUseAdminApprovalModeForAdministrators
getLocalSecurityOptionsVirtualizeFileAndRegistryWriteFailuresToPerUserLocations()
Gets the localSecurityOptionsVirtualizeFileAndRegistryWriteFailuresToPerUserLocations Virtualize file and registry write failures to per user locations
public
getLocalSecurityOptionsVirtualizeFileAndRegistryWriteFailuresToPerUserLocations() : bool|null
Return values
bool|null —The localSecurityOptionsVirtualizeFileAndRegistryWriteFailuresToPerUserLocations
getODataType()
Gets the ODataType
public
getODataType() : string|null
Return values
string|null —The ODataType
getProperties()
Gets the property dictionary of the Entity
public
getProperties() : array<string|int, mixed>
Return values
array<string|int, mixed> —The list of properties
getRoleScopeTagIds()
Gets the roleScopeTagIds List of Scope Tags for this Entity instance.
public
getRoleScopeTagIds() : string|null
Return values
string|null —The roleScopeTagIds
getSmartScreenBlockOverrideForFiles()
Gets the smartScreenBlockOverrideForFiles Allows IT Admins to control whether users can can ignore SmartScreen warnings and run malicious files.
public
getSmartScreenBlockOverrideForFiles() : bool|null
Return values
bool|null —The smartScreenBlockOverrideForFiles
getSmartScreenEnableInShell()
Gets the smartScreenEnableInShell Allows IT Admins to configure SmartScreen for Windows.
public
getSmartScreenEnableInShell() : bool|null
Return values
bool|null —The smartScreenEnableInShell
getSupportsScopeTags()
Gets the supportsScopeTags Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only.
public
getSupportsScopeTags() : bool|null
Return values
bool|null —The supportsScopeTags
getUserRightsAccessCredentialManagerAsTrustedCaller()
Gets the userRightsAccessCredentialManagerAsTrustedCaller This user right is used by Credential Manager during Backup/Restore. Users' saved credentials might be compromised if this privilege is given to other entities. Only states NotConfigured and Allowed are supported
public
getUserRightsAccessCredentialManagerAsTrustedCaller() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsAccessCredentialManagerAsTrustedCaller
getUserRightsActAsPartOfTheOperatingSystem()
Gets the userRightsActAsPartOfTheOperatingSystem This user right allows a process to impersonate any user without authentication. The process can therefore gain access to the same local resources as that user. Only states NotConfigured and Allowed are supported
public
getUserRightsActAsPartOfTheOperatingSystem() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsActAsPartOfTheOperatingSystem
getUserRightsAllowAccessFromNetwork()
Gets the userRightsAllowAccessFromNetwork This user right determines which users and groups are allowed to connect to the computer over the network. State Allowed is supported.
public
getUserRightsAllowAccessFromNetwork() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsAllowAccessFromNetwork
getUserRightsBackupData()
Gets the userRightsBackupData This user right determines which users can bypass file, directory, registry, and other persistent objects permissions when backing up files and directories. Only states NotConfigured and Allowed are supported
public
getUserRightsBackupData() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsBackupData
getUserRightsBlockAccessFromNetwork()
Gets the userRightsBlockAccessFromNetwork This user right determines which users and groups are block from connecting to the computer over the network. State Block is supported.
public
getUserRightsBlockAccessFromNetwork() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsBlockAccessFromNetwork
getUserRightsChangeSystemTime()
Gets the userRightsChangeSystemTime This user right determines which users and groups can change the time and date on the internal clock of the computer. Only states NotConfigured and Allowed are supported
public
getUserRightsChangeSystemTime() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsChangeSystemTime
getUserRightsCreateGlobalObjects()
Gets the userRightsCreateGlobalObjects This security setting determines whether users can create global objects that are available to all sessions. Users who can create global objects could affect processes that run under other users' sessions, which could lead to application failure or data corruption. Only states NotConfigured and Allowed are supported
public
getUserRightsCreateGlobalObjects() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsCreateGlobalObjects
getUserRightsCreatePageFile()
Gets the userRightsCreatePageFile This user right determines which users and groups can call an internal API to create and change the size of a page file. Only states NotConfigured and Allowed are supported
public
getUserRightsCreatePageFile() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsCreatePageFile
getUserRightsCreatePermanentSharedObjects()
Gets the userRightsCreatePermanentSharedObjects This user right determines which accounts can be used by processes to create a directory object using the object manager. Only states NotConfigured and Allowed are supported
public
getUserRightsCreatePermanentSharedObjects() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsCreatePermanentSharedObjects
getUserRightsCreateSymbolicLinks()
Gets the userRightsCreateSymbolicLinks This user right determines if the user can create a symbolic link from the computer to which they are logged on. Only states NotConfigured and Allowed are supported
public
getUserRightsCreateSymbolicLinks() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsCreateSymbolicLinks
getUserRightsCreateToken()
Gets the userRightsCreateToken This user right determines which users/groups can be used by processes to create a token that can then be used to get access to any local resources when the process uses an internal API to create an access token. Only states NotConfigured and Allowed are supported
public
getUserRightsCreateToken() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsCreateToken
getUserRightsDebugPrograms()
Gets the userRightsDebugPrograms This user right determines which users can attach a debugger to any process or to the kernel. Only states NotConfigured and Allowed are supported
public
getUserRightsDebugPrograms() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsDebugPrograms
getUserRightsDelegation()
Gets the userRightsDelegation This user right determines which users can set the Trusted for Delegation setting on a user or computer object. Only states NotConfigured and Allowed are supported.
public
getUserRightsDelegation() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsDelegation
getUserRightsDenyLocalLogOn()
Gets the userRightsDenyLocalLogOn This user right determines which users cannot log on to the computer. States NotConfigured, Blocked are supported
public
getUserRightsDenyLocalLogOn() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsDenyLocalLogOn
getUserRightsGenerateSecurityAudits()
Gets the userRightsGenerateSecurityAudits This user right determines which accounts can be used by a process to add entries to the security log. The security log is used to trace unauthorized system access. Only states NotConfigured and Allowed are supported.
public
getUserRightsGenerateSecurityAudits() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsGenerateSecurityAudits
getUserRightsImpersonateClient()
Gets the userRightsImpersonateClient Assigning this user right to a user allows programs running on behalf of that user to impersonate a client. Requiring this user right for this kind of impersonation prevents an unauthorized user from convincing a client to connect to a service that they have created and then impersonating that client, which can elevate the unauthorized user's permissions to administrative or system levels. Only states NotConfigured and Allowed are supported.
public
getUserRightsImpersonateClient() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsImpersonateClient
getUserRightsIncreaseSchedulingPriority()
Gets the userRightsIncreaseSchedulingPriority This user right determines which accounts can use a process with Write Property access to another process to increase the execution priority assigned to the other process. Only states NotConfigured and Allowed are supported.
public
getUserRightsIncreaseSchedulingPriority() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsIncreaseSchedulingPriority
getUserRightsLoadUnloadDrivers()
Gets the userRightsLoadUnloadDrivers This user right determines which users can dynamically load and unload device drivers or other code in to kernel mode. Only states NotConfigured and Allowed are supported.
public
getUserRightsLoadUnloadDrivers() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsLoadUnloadDrivers
getUserRightsLocalLogOn()
Gets the userRightsLocalLogOn This user right determines which users can log on to the computer. States NotConfigured, Allowed are supported
public
getUserRightsLocalLogOn() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsLocalLogOn
getUserRightsLockMemory()
Gets the userRightsLockMemory This user right determines which accounts can use a process to keep data in physical memory, which prevents the system from paging the data to virtual memory on disk. Only states NotConfigured and Allowed are supported.
public
getUserRightsLockMemory() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsLockMemory
getUserRightsManageAuditingAndSecurityLogs()
Gets the userRightsManageAuditingAndSecurityLogs This user right determines which users can specify object access auditing options for individual resources, such as files, Active Directory objects, and registry keys. Only states NotConfigured and Allowed are supported.
public
getUserRightsManageAuditingAndSecurityLogs() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsManageAuditingAndSecurityLogs
getUserRightsManageVolumes()
Gets the userRightsManageVolumes This user right determines which users and groups can run maintenance tasks on a volume, such as remote defragmentation. Only states NotConfigured and Allowed are supported.
public
getUserRightsManageVolumes() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsManageVolumes
getUserRightsModifyFirmwareEnvironment()
Gets the userRightsModifyFirmwareEnvironment This user right determines who can modify firmware environment values. Only states NotConfigured and Allowed are supported.
public
getUserRightsModifyFirmwareEnvironment() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsModifyFirmwareEnvironment
getUserRightsModifyObjectLabels()
Gets the userRightsModifyObjectLabels This user right determines which user accounts can modify the integrity label of objects, such as files, registry keys, or processes owned by other users. Only states NotConfigured and Allowed are supported.
public
getUserRightsModifyObjectLabels() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsModifyObjectLabels
getUserRightsProfileSingleProcess()
Gets the userRightsProfileSingleProcess This user right determines which users can use performance monitoring tools to monitor the performance of system processes. Only states NotConfigured and Allowed are supported.
public
getUserRightsProfileSingleProcess() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsProfileSingleProcess
getUserRightsRemoteDesktopServicesLogOn()
Gets the userRightsRemoteDesktopServicesLogOn This user right determines which users and groups are prohibited from logging on as a Remote Desktop Services client. Only states NotConfigured and Blocked are supported
public
getUserRightsRemoteDesktopServicesLogOn() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsRemoteDesktopServicesLogOn
getUserRightsRemoteShutdown()
Gets the userRightsRemoteShutdown This user right determines which users are allowed to shut down a computer from a remote location on the network. Misuse of this user right can result in a denial of service. Only states NotConfigured and Allowed are supported.
public
getUserRightsRemoteShutdown() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsRemoteShutdown
getUserRightsRestoreData()
Gets the userRightsRestoreData This user right determines which users can bypass file, directory, registry, and other persistent objects permissions when restoring backed up files and directories, and determines which users can set any valid security principal as the owner of an object. Only states NotConfigured and Allowed are supported.
public
getUserRightsRestoreData() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsRestoreData
getUserRightsTakeOwnership()
Gets the userRightsTakeOwnership This user right determines which users can take ownership of any securable object in the system, including Active Directory objects, files and folders, printers, registry keys, processes, and threads. Only states NotConfigured and Allowed are supported.
public
getUserRightsTakeOwnership() : DeviceManagementUserRightsSetting|null
Return values
DeviceManagementUserRightsSetting|null —The userRightsTakeOwnership
getUserStatuses()
Gets the userStatuses Device configuration installation status by user.
public
getUserStatuses() : array<string|int, mixed>|null
Return values
array<string|int, mixed>|null —The userStatuses
getUserStatusOverview()
Gets the userStatusOverview Device Configuration users status overview
public
getUserStatusOverview() : DeviceConfigurationUserOverview|null
Return values
DeviceConfigurationUserOverview|null —The userStatusOverview
getVersion()
Gets the version Version of the device configuration.
public
getVersion() : int|null
Return values
int|null —The version
getWindowsDefenderTamperProtection()
Gets the windowsDefenderTamperProtection Configure windows defender TamperProtection settings. Possible values are: notConfigured, enable, disable.
public
getWindowsDefenderTamperProtection() : WindowsDefenderTamperProtectionOptions|null
Return values
WindowsDefenderTamperProtectionOptions|null —The windowsDefenderTamperProtection
getXboxServicesAccessoryManagementServiceStartupMode()
Gets the xboxServicesAccessoryManagementServiceStartupMode This setting determines whether the Accessory management service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual. Possible values are: manual, automatic, disabled.
public
getXboxServicesAccessoryManagementServiceStartupMode() : ServiceStartType|null
Return values
ServiceStartType|null —The xboxServicesAccessoryManagementServiceStartupMode
getXboxServicesEnableXboxGameSaveTask()
Gets the xboxServicesEnableXboxGameSaveTask This setting determines whether xbox game save is enabled (1) or disabled (0).
public
getXboxServicesEnableXboxGameSaveTask() : bool|null
Return values
bool|null —The xboxServicesEnableXboxGameSaveTask
getXboxServicesLiveAuthManagerServiceStartupMode()
Gets the xboxServicesLiveAuthManagerServiceStartupMode This setting determines whether Live Auth Manager service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual. Possible values are: manual, automatic, disabled.
public
getXboxServicesLiveAuthManagerServiceStartupMode() : ServiceStartType|null
Return values
ServiceStartType|null —The xboxServicesLiveAuthManagerServiceStartupMode
getXboxServicesLiveGameSaveServiceStartupMode()
Gets the xboxServicesLiveGameSaveServiceStartupMode This setting determines whether Live Game save service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual. Possible values are: manual, automatic, disabled.
public
getXboxServicesLiveGameSaveServiceStartupMode() : ServiceStartType|null
Return values
ServiceStartType|null —The xboxServicesLiveGameSaveServiceStartupMode
getXboxServicesLiveNetworkingServiceStartupMode()
Gets the xboxServicesLiveNetworkingServiceStartupMode This setting determines whether Networking service's start type is Automatic(2), Manual(3), Disabled(4). Default: Manual. Possible values are: manual, automatic, disabled.
public
getXboxServicesLiveNetworkingServiceStartupMode() : ServiceStartType|null
Return values
ServiceStartType|null —The xboxServicesLiveNetworkingServiceStartupMode
jsonSerialize()
Serializes the object by property array Manually serialize DateTime into RFC3339 format
public
jsonSerialize() : array<string|int, mixed>
Return values
array<string|int, mixed> —The list of properties
setApplicationGuardAllowCameraMicrophoneRedirection()
Sets the applicationGuardAllowCameraMicrophoneRedirection Gets or sets whether applications inside Microsoft Defender Application Guard can access the device’s camera and microphone.
public
setApplicationGuardAllowCameraMicrophoneRedirection(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The applicationGuardAllowCameraMicrophoneRedirection
Return values
Windows10EndpointProtectionConfiguration —setApplicationGuardAllowFileSaveOnHost()
Sets the applicationGuardAllowFileSaveOnHost Allow users to download files from Edge in the application guard container and save them on the host file system
public
setApplicationGuardAllowFileSaveOnHost(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The applicationGuardAllowFileSaveOnHost
Return values
Windows10EndpointProtectionConfiguration —setApplicationGuardAllowPersistence()
Sets the applicationGuardAllowPersistence Allow persisting user generated data inside the App Guard Containter (favorites, cookies, web passwords, etc.)
public
setApplicationGuardAllowPersistence(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The applicationGuardAllowPersistence
Return values
Windows10EndpointProtectionConfiguration —setApplicationGuardAllowPrintToLocalPrinters()
Sets the applicationGuardAllowPrintToLocalPrinters Allow printing to Local Printers from Container
public
setApplicationGuardAllowPrintToLocalPrinters(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The applicationGuardAllowPrintToLocalPrinters
Return values
Windows10EndpointProtectionConfiguration —setApplicationGuardAllowPrintToNetworkPrinters()
Sets the applicationGuardAllowPrintToNetworkPrinters Allow printing to Network Printers from Container
public
setApplicationGuardAllowPrintToNetworkPrinters(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The applicationGuardAllowPrintToNetworkPrinters
Return values
Windows10EndpointProtectionConfiguration —setApplicationGuardAllowPrintToPDF()
Sets the applicationGuardAllowPrintToPDF Allow printing to PDF from Container
public
setApplicationGuardAllowPrintToPDF(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The applicationGuardAllowPrintToPDF
Return values
Windows10EndpointProtectionConfiguration —setApplicationGuardAllowPrintToXPS()
Sets the applicationGuardAllowPrintToXPS Allow printing to XPS from Container
public
setApplicationGuardAllowPrintToXPS(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The applicationGuardAllowPrintToXPS
Return values
Windows10EndpointProtectionConfiguration —setApplicationGuardAllowVirtualGPU()
Sets the applicationGuardAllowVirtualGPU Allow application guard to use virtual GPU
public
setApplicationGuardAllowVirtualGPU(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The applicationGuardAllowVirtualGPU
Return values
Windows10EndpointProtectionConfiguration —setApplicationGuardBlockClipboardSharing()
Sets the applicationGuardBlockClipboardSharing Block clipboard to share data from Host to Container, or from Container to Host, or both ways, or neither ways. Possible values are: notConfigured, blockBoth, blockHostToContainer, blockContainerToHost, blockNone.
public
setApplicationGuardBlockClipboardSharing(ApplicationGuardBlockClipboardSharingType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : ApplicationGuardBlockClipboardSharingType
-
The applicationGuardBlockClipboardSharing
Return values
Windows10EndpointProtectionConfiguration —setApplicationGuardBlockFileTransfer()
Sets the applicationGuardBlockFileTransfer Block clipboard to transfer image file, text file or neither of them. Possible values are: notConfigured, blockImageAndTextFile, blockImageFile, blockNone, blockTextFile.
public
setApplicationGuardBlockFileTransfer(ApplicationGuardBlockFileTransferType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : ApplicationGuardBlockFileTransferType
-
The applicationGuardBlockFileTransfer
Return values
Windows10EndpointProtectionConfiguration —setApplicationGuardBlockNonEnterpriseContent()
Sets the applicationGuardBlockNonEnterpriseContent Block enterprise sites to load non-enterprise content, such as third party plug-ins
public
setApplicationGuardBlockNonEnterpriseContent(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The applicationGuardBlockNonEnterpriseContent
Return values
Windows10EndpointProtectionConfiguration —setApplicationGuardCertificateThumbprints()
Sets the applicationGuardCertificateThumbprints Allows certain device level Root Certificates to be shared with the Microsoft Defender Application Guard container.
public
setApplicationGuardCertificateThumbprints(string $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : string
-
The applicationGuardCertificateThumbprints
Return values
Windows10EndpointProtectionConfiguration —setApplicationGuardEnabled()
Sets the applicationGuardEnabled Enable Windows Defender Application Guard
public
setApplicationGuardEnabled(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The applicationGuardEnabled
Return values
Windows10EndpointProtectionConfiguration —setApplicationGuardEnabledOptions()
Sets the applicationGuardEnabledOptions Enable Windows Defender Application Guard for newer Windows builds. Possible values are: notConfigured, enabledForEdge, enabledForOffice, enabledForEdgeAndOffice.
public
setApplicationGuardEnabledOptions(ApplicationGuardEnabledOptions $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : ApplicationGuardEnabledOptions
-
The applicationGuardEnabledOptions
Return values
Windows10EndpointProtectionConfiguration —setApplicationGuardForceAuditing()
Sets the applicationGuardForceAuditing Force auditing will persist Windows logs and events to meet security/compliance criteria (sample events are user login-logoff, use of privilege rights, software installation, system changes, etc.)
public
setApplicationGuardForceAuditing(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The applicationGuardForceAuditing
Return values
Windows10EndpointProtectionConfiguration —setAppLockerApplicationControl()
Sets the appLockerApplicationControl Enables the Admin to choose what types of app to allow on devices. Possible values are: notConfigured, enforceComponentsAndStoreApps, auditComponentsAndStoreApps, enforceComponentsStoreAppsAndSmartlocker, auditComponentsStoreAppsAndSmartlocker.
public
setAppLockerApplicationControl(AppLockerApplicationControlType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : AppLockerApplicationControlType
-
The appLockerApplicationControl
Return values
Windows10EndpointProtectionConfiguration —setAssignments()
Sets the assignments The list of assignments for the device configuration profile.
public
setAssignments(DeviceConfigurationAssignment $val) : DeviceConfiguration
Parameters
- $val : DeviceConfigurationAssignment
-
The assignments
Return values
DeviceConfiguration —setBitLockerAllowStandardUserEncryption()
Sets the bitLockerAllowStandardUserEncryption Allows the admin to allow standard users to enable encrpytion during Azure AD Join.
public
setBitLockerAllowStandardUserEncryption(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The bitLockerAllowStandardUserEncryption
Return values
Windows10EndpointProtectionConfiguration —setBitLockerDisableWarningForOtherDiskEncryption()
Sets the bitLockerDisableWarningForOtherDiskEncryption Allows the Admin to disable the warning prompt for other disk encryption on the user machines.
public
setBitLockerDisableWarningForOtherDiskEncryption(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The bitLockerDisableWarningForOtherDiskEncryption
Return values
Windows10EndpointProtectionConfiguration —setBitLockerEnableStorageCardEncryptionOnMobile()
Sets the bitLockerEnableStorageCardEncryptionOnMobile Allows the admin to require encryption to be turned on using BitLocker. This policy is valid only for a mobile SKU.
public
setBitLockerEnableStorageCardEncryptionOnMobile(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The bitLockerEnableStorageCardEncryptionOnMobile
Return values
Windows10EndpointProtectionConfiguration —setBitLockerEncryptDevice()
Sets the bitLockerEncryptDevice Allows the admin to require encryption to be turned on using BitLocker.
public
setBitLockerEncryptDevice(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The bitLockerEncryptDevice
Return values
Windows10EndpointProtectionConfiguration —setBitLockerFixedDrivePolicy()
Sets the bitLockerFixedDrivePolicy BitLocker Fixed Drive Policy.
public
setBitLockerFixedDrivePolicy(BitLockerFixedDrivePolicy $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : BitLockerFixedDrivePolicy
-
The bitLockerFixedDrivePolicy
Return values
Windows10EndpointProtectionConfiguration —setBitLockerRecoveryPasswordRotation()
Sets the bitLockerRecoveryPasswordRotation This setting initiates a client-driven recovery password rotation after an OS drive recovery (either by using bootmgr or WinRE). Possible values are: notConfigured, disabled, enabledForAzureAd, enabledForAzureAdAndHybrid.
public
setBitLockerRecoveryPasswordRotation(BitLockerRecoveryPasswordRotationType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : BitLockerRecoveryPasswordRotationType
-
The bitLockerRecoveryPasswordRotation
Return values
Windows10EndpointProtectionConfiguration —setBitLockerRemovableDrivePolicy()
Sets the bitLockerRemovableDrivePolicy BitLocker Removable Drive Policy.
public
setBitLockerRemovableDrivePolicy(BitLockerRemovableDrivePolicy $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : BitLockerRemovableDrivePolicy
-
The bitLockerRemovableDrivePolicy
Return values
Windows10EndpointProtectionConfiguration —setBitLockerSystemDrivePolicy()
Sets the bitLockerSystemDrivePolicy BitLocker System Drive Policy.
public
setBitLockerSystemDrivePolicy(BitLockerSystemDrivePolicy $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : BitLockerSystemDrivePolicy
-
The bitLockerSystemDrivePolicy
Return values
Windows10EndpointProtectionConfiguration —setCreatedDateTime()
Sets the createdDateTime DateTime the object was created.
public
setCreatedDateTime(DateTime $val) : DeviceConfiguration
Parameters
- $val : DateTime
-
The createdDateTime
Return values
DeviceConfiguration —setDefenderAdditionalGuardedFolders()
Sets the defenderAdditionalGuardedFolders List of folder paths to be added to the list of protected folders
public
setDefenderAdditionalGuardedFolders(string $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : string
-
The defenderAdditionalGuardedFolders
Return values
Windows10EndpointProtectionConfiguration —setDefenderAdobeReaderLaunchChildProcess()
Sets the defenderAdobeReaderLaunchChildProcess Value indicating the behavior of Adobe Reader from creating child processes. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
setDefenderAdobeReaderLaunchChildProcess(DefenderProtectionType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderProtectionType
-
The defenderAdobeReaderLaunchChildProcess
Return values
Windows10EndpointProtectionConfiguration —setDefenderAdvancedRansomewareProtectionType()
Sets the defenderAdvancedRansomewareProtectionType Value indicating use of advanced protection against ransomeware. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
setDefenderAdvancedRansomewareProtectionType(DefenderProtectionType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderProtectionType
-
The defenderAdvancedRansomewareProtectionType
Return values
Windows10EndpointProtectionConfiguration —setDefenderAllowBehaviorMonitoring()
Sets the defenderAllowBehaviorMonitoring Allows or disallows Windows Defender Behavior Monitoring functionality.
public
setDefenderAllowBehaviorMonitoring(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderAllowBehaviorMonitoring
Return values
Windows10EndpointProtectionConfiguration —setDefenderAllowCloudProtection()
Sets the defenderAllowCloudProtection To best protect your PC, Windows Defender will send information to Microsoft about any problems it finds. Microsoft will analyze that information, learn more about problems affecting you and other customers, and offer improved solutions.
public
setDefenderAllowCloudProtection(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderAllowCloudProtection
Return values
Windows10EndpointProtectionConfiguration —setDefenderAllowEndUserAccess()
Sets the defenderAllowEndUserAccess Allows or disallows user access to the Windows Defender UI. If disallowed, all Windows Defender notifications will also be suppressed.
public
setDefenderAllowEndUserAccess(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderAllowEndUserAccess
Return values
Windows10EndpointProtectionConfiguration —setDefenderAllowIntrusionPreventionSystem()
Sets the defenderAllowIntrusionPreventionSystem Allows or disallows Windows Defender Intrusion Prevention functionality.
public
setDefenderAllowIntrusionPreventionSystem(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderAllowIntrusionPreventionSystem
Return values
Windows10EndpointProtectionConfiguration —setDefenderAllowOnAccessProtection()
Sets the defenderAllowOnAccessProtection Allows or disallows Windows Defender On Access Protection functionality.
public
setDefenderAllowOnAccessProtection(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderAllowOnAccessProtection
Return values
Windows10EndpointProtectionConfiguration —setDefenderAllowRealTimeMonitoring()
Sets the defenderAllowRealTimeMonitoring Allows or disallows Windows Defender Realtime Monitoring functionality.
public
setDefenderAllowRealTimeMonitoring(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderAllowRealTimeMonitoring
Return values
Windows10EndpointProtectionConfiguration —setDefenderAllowScanArchiveFiles()
Sets the defenderAllowScanArchiveFiles Allows or disallows scanning of archives.
public
setDefenderAllowScanArchiveFiles(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderAllowScanArchiveFiles
Return values
Windows10EndpointProtectionConfiguration —setDefenderAllowScanDownloads()
Sets the defenderAllowScanDownloads Allows or disallows Windows Defender IOAVP Protection functionality.
public
setDefenderAllowScanDownloads(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderAllowScanDownloads
Return values
Windows10EndpointProtectionConfiguration —setDefenderAllowScanNetworkFiles()
Sets the defenderAllowScanNetworkFiles Allows or disallows a scanning of network files.
public
setDefenderAllowScanNetworkFiles(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderAllowScanNetworkFiles
Return values
Windows10EndpointProtectionConfiguration —setDefenderAllowScanRemovableDrivesDuringFullScan()
Sets the defenderAllowScanRemovableDrivesDuringFullScan Allows or disallows a full scan of removable drives. During a quick scan, removable drives may still be scanned.
public
setDefenderAllowScanRemovableDrivesDuringFullScan(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderAllowScanRemovableDrivesDuringFullScan
Return values
Windows10EndpointProtectionConfiguration —setDefenderAllowScanScriptsLoadedInInternetExplorer()
Sets the defenderAllowScanScriptsLoadedInInternetExplorer Allows or disallows Windows Defender Script Scanning functionality.
public
setDefenderAllowScanScriptsLoadedInInternetExplorer(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderAllowScanScriptsLoadedInInternetExplorer
Return values
Windows10EndpointProtectionConfiguration —setDefenderAttackSurfaceReductionExcludedPaths()
Sets the defenderAttackSurfaceReductionExcludedPaths List of exe files and folders to be excluded from attack surface reduction rules
public
setDefenderAttackSurfaceReductionExcludedPaths(string $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : string
-
The defenderAttackSurfaceReductionExcludedPaths
Return values
Windows10EndpointProtectionConfiguration —setDefenderBlockEndUserAccess()
Sets the defenderBlockEndUserAccess Allows or disallows user access to the Windows Defender UI. If disallowed, all Windows Defender notifications will also be suppressed.
public
setDefenderBlockEndUserAccess(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderBlockEndUserAccess
Return values
Windows10EndpointProtectionConfiguration —setDefenderBlockPersistenceThroughWmiType()
Sets the defenderBlockPersistenceThroughWmiType Value indicating the behavior of Block persistence through WMI event subscription. Possible values are: userDefined, block, auditMode, warn, disable.
public
setDefenderBlockPersistenceThroughWmiType(DefenderAttackSurfaceType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderAttackSurfaceType
-
The defenderBlockPersistenceThroughWmiType
Return values
Windows10EndpointProtectionConfiguration —setDefenderCheckForSignaturesBeforeRunningScan()
Sets the defenderCheckForSignaturesBeforeRunningScan This policy setting allows you to manage whether a check for new virus and spyware definitions will occur before running a scan.
public
setDefenderCheckForSignaturesBeforeRunningScan(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderCheckForSignaturesBeforeRunningScan
Return values
Windows10EndpointProtectionConfiguration —setDefenderCloudBlockLevel()
Sets the defenderCloudBlockLevel Added in Windows 10, version 1709. This policy setting determines how aggressive Windows Defender Antivirus will be in blocking and scanning suspicious files. Value type is integer. This feature requires the 'Join Microsoft MAPS' setting enabled in order to function. Possible values are: notConfigured, high, highPlus, zeroTolerance.
public
setDefenderCloudBlockLevel(DefenderCloudBlockLevelType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderCloudBlockLevelType
-
The defenderCloudBlockLevel
Return values
Windows10EndpointProtectionConfiguration —setDefenderCloudExtendedTimeoutInSeconds()
Sets the defenderCloudExtendedTimeoutInSeconds Added in Windows 10, version 1709. This feature allows Windows Defender Antivirus to block a suspicious file for up to 60 seconds, and scan it in the cloud to make sure it's safe. Value type is integer, range is 0 - 50. This feature depends on three other MAPS settings the must all be enabled- 'Configure the 'Block at First Sight' feature; 'Join Microsoft MAPS'; 'Send file samples when further analysis is required'. Valid values 0 to 50
public
setDefenderCloudExtendedTimeoutInSeconds(int $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : int
-
The defenderCloudExtendedTimeoutInSeconds
Return values
Windows10EndpointProtectionConfiguration —setDefenderDaysBeforeDeletingQuarantinedMalware()
Sets the defenderDaysBeforeDeletingQuarantinedMalware Time period (in days) that quarantine items will be stored on the system. Valid values 0 to 90
public
setDefenderDaysBeforeDeletingQuarantinedMalware(int $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : int
-
The defenderDaysBeforeDeletingQuarantinedMalware
Return values
Windows10EndpointProtectionConfiguration —setDefenderDetectedMalwareActions()
Sets the defenderDetectedMalwareActions Allows an administrator to specify any valid threat severity levels and the corresponding default action ID to take.
public
setDefenderDetectedMalwareActions(DefenderDetectedMalwareActions $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderDetectedMalwareActions
-
The defenderDetectedMalwareActions
Return values
Windows10EndpointProtectionConfiguration —setDefenderDisableBehaviorMonitoring()
Sets the defenderDisableBehaviorMonitoring Allows or disallows Windows Defender Behavior Monitoring functionality.
public
setDefenderDisableBehaviorMonitoring(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderDisableBehaviorMonitoring
Return values
Windows10EndpointProtectionConfiguration —setDefenderDisableCatchupFullScan()
Sets the defenderDisableCatchupFullScan This policy setting allows you to configure catch-up scans for scheduled full scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time.
public
setDefenderDisableCatchupFullScan(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderDisableCatchupFullScan
Return values
Windows10EndpointProtectionConfiguration —setDefenderDisableCatchupQuickScan()
Sets the defenderDisableCatchupQuickScan This policy setting allows you to configure catch-up scans for scheduled quick scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time.
public
setDefenderDisableCatchupQuickScan(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderDisableCatchupQuickScan
Return values
Windows10EndpointProtectionConfiguration —setDefenderDisableCloudProtection()
Sets the defenderDisableCloudProtection To best protect your PC, Windows Defender will send information to Microsoft about any problems it finds. Microsoft will analyze that information, learn more about problems affecting you and other customers, and offer improved solutions.
public
setDefenderDisableCloudProtection(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderDisableCloudProtection
Return values
Windows10EndpointProtectionConfiguration —setDefenderDisableIntrusionPreventionSystem()
Sets the defenderDisableIntrusionPreventionSystem Allows or disallows Windows Defender Intrusion Prevention functionality.
public
setDefenderDisableIntrusionPreventionSystem(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderDisableIntrusionPreventionSystem
Return values
Windows10EndpointProtectionConfiguration —setDefenderDisableOnAccessProtection()
Sets the defenderDisableOnAccessProtection Allows or disallows Windows Defender On Access Protection functionality.
public
setDefenderDisableOnAccessProtection(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderDisableOnAccessProtection
Return values
Windows10EndpointProtectionConfiguration —setDefenderDisableRealTimeMonitoring()
Sets the defenderDisableRealTimeMonitoring Allows or disallows Windows Defender Realtime Monitoring functionality.
public
setDefenderDisableRealTimeMonitoring(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderDisableRealTimeMonitoring
Return values
Windows10EndpointProtectionConfiguration —setDefenderDisableScanArchiveFiles()
Sets the defenderDisableScanArchiveFiles Allows or disallows scanning of archives.
public
setDefenderDisableScanArchiveFiles(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderDisableScanArchiveFiles
Return values
Windows10EndpointProtectionConfiguration —setDefenderDisableScanDownloads()
Sets the defenderDisableScanDownloads Allows or disallows Windows Defender IOAVP Protection functionality.
public
setDefenderDisableScanDownloads(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderDisableScanDownloads
Return values
Windows10EndpointProtectionConfiguration —setDefenderDisableScanNetworkFiles()
Sets the defenderDisableScanNetworkFiles Allows or disallows a scanning of network files.
public
setDefenderDisableScanNetworkFiles(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderDisableScanNetworkFiles
Return values
Windows10EndpointProtectionConfiguration —setDefenderDisableScanRemovableDrivesDuringFullScan()
Sets the defenderDisableScanRemovableDrivesDuringFullScan Allows or disallows a full scan of removable drives. During a quick scan, removable drives may still be scanned.
public
setDefenderDisableScanRemovableDrivesDuringFullScan(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderDisableScanRemovableDrivesDuringFullScan
Return values
Windows10EndpointProtectionConfiguration —setDefenderDisableScanScriptsLoadedInInternetExplorer()
Sets the defenderDisableScanScriptsLoadedInInternetExplorer Allows or disallows Windows Defender Script Scanning functionality.
public
setDefenderDisableScanScriptsLoadedInInternetExplorer(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderDisableScanScriptsLoadedInInternetExplorer
Return values
Windows10EndpointProtectionConfiguration —setDefenderEmailContentExecution()
Sets the defenderEmailContentExecution Value indicating if execution of executable content (exe, dll, ps, js, vbs, etc) should be dropped from email (webmail/mail-client). Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
setDefenderEmailContentExecution(DefenderProtectionType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderProtectionType
-
The defenderEmailContentExecution
Return values
Windows10EndpointProtectionConfiguration —setDefenderEmailContentExecutionType()
Sets the defenderEmailContentExecutionType Value indicating if execution of executable content (exe, dll, ps, js, vbs, etc) should be dropped from email (webmail/mail-client). Possible values are: userDefined, block, auditMode, warn, disable.
public
setDefenderEmailContentExecutionType(DefenderAttackSurfaceType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderAttackSurfaceType
-
The defenderEmailContentExecutionType
Return values
Windows10EndpointProtectionConfiguration —setDefenderEnableLowCpuPriority()
Sets the defenderEnableLowCpuPriority This policy setting allows you to enable or disable low CPU priority for scheduled scans.
public
setDefenderEnableLowCpuPriority(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderEnableLowCpuPriority
Return values
Windows10EndpointProtectionConfiguration —setDefenderEnableScanIncomingMail()
Sets the defenderEnableScanIncomingMail Allows or disallows scanning of email.
public
setDefenderEnableScanIncomingMail(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderEnableScanIncomingMail
Return values
Windows10EndpointProtectionConfiguration —setDefenderEnableScanMappedNetworkDrivesDuringFullScan()
Sets the defenderEnableScanMappedNetworkDrivesDuringFullScan Allows or disallows a full scan of mapped network drives.
public
setDefenderEnableScanMappedNetworkDrivesDuringFullScan(bool $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : bool
-
The defenderEnableScanMappedNetworkDrivesDuringFullScan
Return values
Windows10EndpointProtectionConfiguration —setDefenderExploitProtectionXml()
Sets the defenderExploitProtectionXml Xml content containing information regarding exploit protection details.
public
setDefenderExploitProtectionXml(Stream $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : Stream
-
The defenderExploitProtectionXml
Return values
Windows10EndpointProtectionConfiguration —setDefenderExploitProtectionXmlFileName()
Sets the defenderExploitProtectionXmlFileName Name of the file from which DefenderExploitProtectionXml was obtained.
public
setDefenderExploitProtectionXmlFileName(string $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : string
-
The defenderExploitProtectionXmlFileName
Return values
Windows10EndpointProtectionConfiguration —setDefenderFileExtensionsToExclude()
Sets the defenderFileExtensionsToExclude File extensions to exclude from scans and real time protection.
public
setDefenderFileExtensionsToExclude(string $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : string
-
The defenderFileExtensionsToExclude
Return values
Windows10EndpointProtectionConfiguration —setDefenderFilesAndFoldersToExclude()
Sets the defenderFilesAndFoldersToExclude Files and folder to exclude from scans and real time protection.
public
setDefenderFilesAndFoldersToExclude(string $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : string
-
The defenderFilesAndFoldersToExclude
Return values
Windows10EndpointProtectionConfiguration —setDefenderGuardedFoldersAllowedAppPaths()
Sets the defenderGuardedFoldersAllowedAppPaths List of paths to exe that are allowed to access protected folders
public
setDefenderGuardedFoldersAllowedAppPaths(string $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : string
-
The defenderGuardedFoldersAllowedAppPaths
Return values
Windows10EndpointProtectionConfiguration —setDefenderGuardMyFoldersType()
Sets the defenderGuardMyFoldersType Value indicating the behavior of protected folders. Possible values are: userDefined, enable, auditMode, blockDiskModification, auditDiskModification.
public
setDefenderGuardMyFoldersType(FolderProtectionType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : FolderProtectionType
-
The defenderGuardMyFoldersType
Return values
Windows10EndpointProtectionConfiguration —setDefenderNetworkProtectionType()
Sets the defenderNetworkProtectionType Value indicating the behavior of NetworkProtection. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
setDefenderNetworkProtectionType(DefenderProtectionType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderProtectionType
-
The defenderNetworkProtectionType
Return values
Windows10EndpointProtectionConfiguration —setDefenderOfficeAppsExecutableContentCreationOrLaunch()
Sets the defenderOfficeAppsExecutableContentCreationOrLaunch Value indicating the behavior of Office applications/macros creating or launching executable content. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
setDefenderOfficeAppsExecutableContentCreationOrLaunch(DefenderProtectionType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderProtectionType
-
The defenderOfficeAppsExecutableContentCreationOrLaunch
Return values
Windows10EndpointProtectionConfiguration —setDefenderOfficeAppsExecutableContentCreationOrLaunchType()
Sets the defenderOfficeAppsExecutableContentCreationOrLaunchType Value indicating the behavior of Office applications/macros creating or launching executable content. Possible values are: userDefined, block, auditMode, warn, disable.
public
setDefenderOfficeAppsExecutableContentCreationOrLaunchType(DefenderAttackSurfaceType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderAttackSurfaceType
-
The defenderOfficeAppsExecutableContentCreationOrLaunchType
Return values
Windows10EndpointProtectionConfiguration —setDefenderOfficeAppsLaunchChildProcess()
Sets the defenderOfficeAppsLaunchChildProcess Value indicating the behavior of Office application launching child processes. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
setDefenderOfficeAppsLaunchChildProcess(DefenderProtectionType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderProtectionType
-
The defenderOfficeAppsLaunchChildProcess
Return values
Windows10EndpointProtectionConfiguration —setDefenderOfficeAppsLaunchChildProcessType()
Sets the defenderOfficeAppsLaunchChildProcessType Value indicating the behavior of Office application launching child processes. Possible values are: userDefined, block, auditMode, warn, disable.
public
setDefenderOfficeAppsLaunchChildProcessType(DefenderAttackSurfaceType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderAttackSurfaceType
-
The defenderOfficeAppsLaunchChildProcessType
Return values
Windows10EndpointProtectionConfiguration —setDefenderOfficeAppsOtherProcessInjection()
Sets the defenderOfficeAppsOtherProcessInjection Value indicating the behavior of Office applications injecting into other processes. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
setDefenderOfficeAppsOtherProcessInjection(DefenderProtectionType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderProtectionType
-
The defenderOfficeAppsOtherProcessInjection
Return values
Windows10EndpointProtectionConfiguration —setDefenderOfficeAppsOtherProcessInjectionType()
Sets the defenderOfficeAppsOtherProcessInjectionType Value indicating the behavior of Office applications injecting into other processes. Possible values are: userDefined, block, auditMode, warn, disable.
public
setDefenderOfficeAppsOtherProcessInjectionType(DefenderAttackSurfaceType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderAttackSurfaceType
-
The defenderOfficeAppsOtherProcessInjectionType
Return values
Windows10EndpointProtectionConfiguration —setDefenderOfficeCommunicationAppsLaunchChildProcess()
Sets the defenderOfficeCommunicationAppsLaunchChildProcess Value indicating the behavior of Office communication applications, including Microsoft Outlook, from creating child processes. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
setDefenderOfficeCommunicationAppsLaunchChildProcess(DefenderProtectionType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderProtectionType
-
The defenderOfficeCommunicationAppsLaunchChildProcess
Return values
Windows10EndpointProtectionConfiguration —setDefenderOfficeMacroCodeAllowWin32Imports()
Sets the defenderOfficeMacroCodeAllowWin32Imports Value indicating the behavior of Win32 imports from Macro code in Office. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
setDefenderOfficeMacroCodeAllowWin32Imports(DefenderProtectionType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderProtectionType
-
The defenderOfficeMacroCodeAllowWin32Imports
Return values
Windows10EndpointProtectionConfiguration —setDefenderOfficeMacroCodeAllowWin32ImportsType()
Sets the defenderOfficeMacroCodeAllowWin32ImportsType Value indicating the behavior of Win32 imports from Macro code in Office. Possible values are: userDefined, block, auditMode, warn, disable.
public
setDefenderOfficeMacroCodeAllowWin32ImportsType(DefenderAttackSurfaceType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderAttackSurfaceType
-
The defenderOfficeMacroCodeAllowWin32ImportsType
Return values
Windows10EndpointProtectionConfiguration —setDefenderPotentiallyUnwantedAppAction()
Sets the defenderPotentiallyUnwantedAppAction Added in Windows 10, version 1607. Specifies the level of detection for potentially unwanted applications (PUAs). Windows Defender alerts you when potentially unwanted software is being downloaded or attempts to install itself on your computer. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
setDefenderPotentiallyUnwantedAppAction(DefenderProtectionType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderProtectionType
-
The defenderPotentiallyUnwantedAppAction
Return values
Windows10EndpointProtectionConfiguration —setDefenderPreventCredentialStealingType()
Sets the defenderPreventCredentialStealingType Value indicating if credential stealing from the Windows local security authority subsystem is permitted. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
setDefenderPreventCredentialStealingType(DefenderProtectionType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderProtectionType
-
The defenderPreventCredentialStealingType
Return values
Windows10EndpointProtectionConfiguration —setDefenderProcessCreation()
Sets the defenderProcessCreation Value indicating response to process creations originating from PSExec and WMI commands. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
public
setDefenderProcessCreation(DefenderProtectionType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderProtectionType
-
The defenderProcessCreation
Return values
Windows10EndpointProtectionConfiguration —setDefenderProcessCreationType()
Sets the defenderProcessCreationType Value indicating response to process creations originating from PSExec and WMI commands. Possible values are: userDefined, block, auditMode, warn, disable.
public
setDefenderProcessCreationType(DefenderAttackSurfaceType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderAttackSurfaceType
-
The defenderProcessCreationType
Return values
Windows10EndpointProtectionConfiguration —setDefenderProcessesToExclude()
Sets the defenderProcessesToExclude Processes to exclude from scans and real time protection.
public
setDefenderProcessesToExclude(string $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : string
-
The defenderProcessesToExclude
Return values
Windows10EndpointProtectionConfiguration —setDefenderScanDirection()
Sets the defenderScanDirection Controls which sets of files should be monitored. Possible values are: monitorAllFiles, monitorIncomingFilesOnly, monitorOutgoingFilesOnly.
public
setDefenderScanDirection(DefenderRealtimeScanDirection $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderRealtimeScanDirection
-
The defenderScanDirection
Return values
Windows10EndpointProtectionConfiguration —setDefenderScanMaxCpuPercentage()
Sets the defenderScanMaxCpuPercentage Represents the average CPU load factor for the Windows Defender scan (in percent). The default value is 50. Valid values 0 to 100
public
setDefenderScanMaxCpuPercentage(int $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : int
-
The defenderScanMaxCpuPercentage
Return values
Windows10EndpointProtectionConfiguration —setDefenderScanType()
Sets the defenderScanType Selects whether to perform a quick scan or full scan. Possible values are: userDefined, disabled, quick, full.
public
setDefenderScanType(DefenderScanType $val) : Windows10EndpointProtectionConfiguration
Parameters
- $val : DefenderScanType
-
The defenderScanType
Return values
Windows10EndpointProtectionConfiguration —setDefenderScheduledQuickScanTime()
Sets the defenderScheduledQuickScanTime Selects the time of day that the Windows Defender quick scan should run. For example, a value of 0=12:00AM, a value of 60=1:00AM, a value of 120=2:00, and so on, up to a value of 1380=11:00PM. The default value is 120
public
setDefenderScheduledQuickScanTime(TimeOfDay $val) : Windows10EndpointProtectionConfiguration
Parameters