Files
Intune/intune/Externally Sourced Remediations/DeviceCompliance/Get-DeviceGuard/Remediate_DeviceGuard.ps1
2025-05-19 15:19:36 -04:00

8 lines
347 B
PowerShell

# Remediation Script: Remediate_DeviceGuard.ps1
# Enable Device Guard
$regKey = "HKLM:\SYSTEM\CurrentControlSet\Control\DeviceGuard"
Set-ItemProperty -Path $regKey -Name "EnableVirtualizationBasedSecurity" -Value 1
Set-ItemProperty -Path $regKey -Name "RequirePlatformSecurityFeatures" -Value 1
Write-Output "Device Guard has been enabled."