Hoppa till innehåll

  • Logga in via Facebook Logga in via Twitter Logga in via Windows Live Log In with LinkedIn Log In with Google      Sign In   
  • Registrera dig nu!





Foto

GPO error message applying settings for {F312195E-3D9D-447A-A3F5-08DFFA24735E}

  Skriven av Andreas Stenhall , 11 August 2017 · 424 visningar

<p>When you have activated Credential Guard for Windows 10 (1607), you might note errors on your clients when they try to update group policies:</p>
<p><code>Windows failed to apply the {F312195E-3D9D-447A-A3F5-08DFFA24735E} settings.</code></p>
<p>You will also find thw below error in the DeviceGuard Operational event log:</p>
<p><code>Device Guard failed to process the Group Policy to enable Virtualization Based Security (Status = 0x80070057): Invalid parameter</code></p>
<p>The problem seems to be related to the incorrect registry value <strong>HypervisorEnforcedCodeIntegrity</strong> being written. It’s set to <strong>3</strong> on Windows 10 v1607, which seems to be a totally undocumented and invalid value. Verify under the key <strong>HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsDeviceGuard</strong>. This value is written as long as the setting “<strong>Virtualization Based Protection of Code Integrity</strong>” found in the GPO setting &#8220;<strong>Turn on Virtualization Based Security</strong>&#8221; is set to “<strong>Not configured</strong>”.</p>
<h3>Solution</h3>
<p>In the GPO setting <strong>Turn on Virtualization Based Security</strong> found in <strong>Computer ConfigurationAdministrative TemplatesSystemDevice Guard</strong> edit the and set <strong>Virtualization Based Protection of Code Integrity</strong> to <strong>Disabled</strong>. This will make the <strong>HypervisorEnforcedCodeIntegrity</strong> turn to <strong>0</strong> and the GPO will apply without errors.</p>


Källa




December 2017

M T O T F L S
    123
45678910
11 121314151617
18192021222324
25262728293031

Twitter