|
Posted by Scott Yost [MSFT] on November 21, 2007, 1:10 pm
Please log in for more thread options Just as a caveat, the XML format is more likely to be supported in the
future than the registry format. It's documented/supported, the registry
backend is not.
--
Scott Yost
Software Development Engineer/Test
Microsoft Corp.
This posting is provided "AS IS" with no warranties, and confers no rights.
> Hi,
>
> You can set Security policy using XML format or writing in platform.reg.
> but I recommend platform.reg.
>
> write this in platform.reg
>
> ;;; unsigned application prompt policy
> [HKEY_LOCAL_MACHINE\Security\Policies\Policies]
> "0000101a"=dword:1
> ;;; signed application policy
> [HKEY_LOCAL_MACHINE\Security\Policies\Policies]
> "0000101b"=dword:1
>
>
> "Mahboobul Alem" wrote:
>
>> The default setting for unsigned application policy is set to 1 (allow
>> unsigned applications to run). Microsoft document suggests creating xml
>> provisioning files to set policy.
>>
>>
>>
>> It seems a simpler step seems to be to include the following in
>> platform.reg
>> file in EOM's BSP. Will this work?
>>
>>
>>
>>
>>
>> ; Unsigned Applications Policy; default value is 1, which means unsigned
>> applications run; value of 0 overwrites this
>> default[HKEY_LOCAL_MACHINE\Security\Policies\Policies]
>> "00001006"=dword:0
>>
>>
>>
>>
>>
|