Timeline for Why was I able to run Sharpkeys even though it isn't signed and Windows 10 Device Guard was enabled?
Current License: CC BY-SA 3.0
11 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 1, 2016 at 19:18 | comment | added | mostlyinformed | Funny enough, a few months ago I myself asked a question about what software whitelisting capabilities are available in non-Enterprise versions of Windows for people who don't want to use third-party software. Someone pointed out that Software Restriction Policies are a less robust & flexible option than either Device Guard or Applocker (in Win 8/8.1 Enterprise) but that option is indeed in the Home and Pro versions. See : security.stackexchange.com/questions/126640/… | |
| Oct 1, 2016 at 14:24 | comment | added | genealogyxie | @halfinformed oh thanks. I only have the pro version, which would explain why I couldn't find the place in the group policy editor to enable Device Guard | |
| Oct 1, 2016 at 6:47 | comment | added | mostlyinformed | There issomething called Secure Boot in newer Windows machines, including those with Home and Pro versions of the OS. And Secure Boot can be turned on & off on in BIOS. (Well, except the new BIOS that supports this is now technically called UEFI.) Secure Boot helps guard key parts of a Windows PC's operating system from malicious alterations. But unlike Device Guard it doesn't do application whitelisting. | |
| Oct 1, 2016 at 6:35 | comment | added | mostlyinformed | Well, first, only the Enterprise version of Windows 10 (perhaps the Education version as well) have Device Guard at this stage. The Home and even the Pro version do not.(Unfortunately.) If you had a Windows 10 Enterprise PC you would almost certainly would have gotten it from work or some other kind of organization with an IT department. Do you know if you have the Win 10 Enterprise version on your PC? | |
| Sep 29, 2016 at 13:03 | comment | added | paj28 | It sounds like your BIOS and Windows both use "Device Guard" to mean different things. Windows Device Guard is not something you enable in the BIOS. | |
| Sep 29, 2016 at 13:00 | comment | added | genealogyxie | @halfinformed also - how would I set it up for a personal computer? Or would I be better off just making a private network for it? | |
| Sep 29, 2016 at 12:51 | comment | added | genealogyxie | @halfinformed oh I just selected "Enable" in BIOS. Apparently it's actually pretty involved. So does merely changing that BIOS setting actually do anything or do I have to do the whole process? | |
| Sep 29, 2016 at 12:50 | history | edited | genealogyxie | CC BY-SA 3.0 |
added 178 characters in body
|
| Sep 29, 2016 at 9:07 | comment | added | mostlyinformed | It might help to get a substantive response if you added some more detail about how you've been setting up this arrangement. For example, do you know whether Device Guard is in effect & blocking anything at all (ie. have you tried any programs and had them have been blocked?)? What procedure did you use to set up Device Guard? (My understanding is that is currently not a simple thing to enable, even by whitelisting setup standards). Are you sure DG isn't in auditing mode (which is used to help with configuration but doesn't actually block programs from running)? More info, please. | |
| Sep 28, 2016 at 17:14 | history | edited | genealogyxie | CC BY-SA 3.0 |
added 49 characters in body
|
| Sep 28, 2016 at 16:53 | history | asked | genealogyxie | CC BY-SA 3.0 |