Modifica

Condividi tramite

Set-CIPolicySetting

Module:
ConfigCI Module

Modifies the SecureSettings within the Code Integrity policy.

Syntax

Set 

Set-CIPolicySetting
    [-FilePath] <String>
    -Provider <String>
    -Key <String>
    -ValueName <String>
    -ValueType <String>
    -Value <String>
    [<CommonParameters>]

Delete 

Set-CIPolicySetting
    [-FilePath] <String>
    -Provider <String>
    -Key <String>
    -ValueName <String>
    [-Delete]
    [<CommonParameters>]

Description

The Set-CIPolicySetting cmdlet modifies the Secure Settings within a Code Integrity policy. Specify the .xml file of the policy to modify. Secure Settings are queried by Windows APIs to set security behaviors.

Examples

Example 1: Set the Code Integrity policy

Set-CIPolicySetting -FilePath C:\Policies\WDAC_policy.xml -Key "{12345678-9abc-def0-1234-56789abcdef0}" -Provider WSH -Value $True -ValueName EnterpriseDefinedClsId -ValueType Boolean

This command sets the Code Integrity policy to allow for the specified Provider, Key and ValueName.

Parameters

-Delete

Indicates that this cmdlet removes a Secure Setting from the Code Integrity policy identified by Provider, Key and ValueName.

Parameter properties

Type:SwitchParameter
Default value:None
Supports wildcards:False
DontShow:False
Aliases:d

Parameter sets

Delete
Position:Named
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-FilePath

Specifies the full path of the policy .xml file.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False
Aliases:f

Parameter sets

(All)
Position:0
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-Key

Specifies the Secure Setting key. The key is the GUID of the program to run in this format:

{33333333-4444-4444-1616-161616161616}

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False
Aliases:k

Parameter sets

(All)
Position:Named
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-Provider

Specifies the Secure Setting provider. The provider is the platform on which the code runs.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False
Aliases:p

Parameter sets

(All)
Position:Named
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-Value

Specifies the Secure Setting value. Specify $True to allow or $False to deny.

Specify $False, or deny, only for base policies, not supplemental policies.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False
Aliases:v

Parameter sets

Set
Position:Named
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-ValueName

Specifies the value name.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False
Aliases:vn

Parameter sets

(All)
Position:Named
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-ValueType

Specifies the value type. Valid values are:

  • Boolean
  • DWord
  • Binary
  • String

Parameter properties

Type:String
Default value:None
Accepted values:Boolean, DWord, Binary, String
Supports wildcards:False
DontShow:False
Aliases:vt

Parameter sets

Set
Position:Named
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

Inputs

None

Outputs

Object