Microsoft.Policies.ServiceControlManager• Machine
Enable svchost.exe mitigation options
This policy setting enables process mitigation options on svchost.exe processes. If you enable this policy setting, built-in system services hosted in svchost.exe processes will have stricter security policies enabled on them. This includes a policy requiring all binaries loaded in these processes to be signed by microsoft, as well as a policy disallowing dynamically-generated code. If you disable or do not configure this policy setting, these stricter security settings will not be applied.
Policy Details
- Policy Name
- SvchostProcessMitigationEnable
- Registry Key
- System\CurrentControlSet\Control\SCMConfig
- Value Name
- EnableSvchostMitigationPolicy
- Supported On
- At least Windows Server 2016, Windows 10
- OMA-URI (CSP)
- ServiceControlManager/SvchostProcessMitigationOS Build Version:10.0.18362CSP Version:9.0Conflict Resolution:LastWriteAllowed Editions:EnterpriseEnterprise NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesIotenterpriseskIotenterpriseseval
- Policy State Values
- Enabled: 1Disabled: 0
- Available Languages
- en-us