add defender smartscreen windows CSP policies (#34428)

Adds 4 defender smartscreen policies, to enable notifying and one for disabling automatic data collection.
2025-10-25 18:57:22 -04:00
parent 3a1b4b6880
commit 8f1bccb5fb
4 changed files with 51 additions and 0 deletions
@@ -0,0 +1,12 @@
+<Replace>
+    <!-- Disables automatic data collection for defender smartscreen -->
+    <Item>
+        <Meta>
+            <Format xmlns="syncml:metinf">int</Format>
+        </Meta>
+        <Target>
+            <LocURI>./Device/Vendor/MSFT/Policy/Config/WebThreatDefense/AutomaticDataCollection</LocURI>
+        </Target>
+        <Data>0</Data>
+    </Item>
+</Replace>
@@ -0,0 +1,13 @@
+<Replace>
+    <!-- Enable Defender SmartScreen to warn users if they type their work or school
+    password into a malicious scenario -->
+    <Item>
+        <Meta>
+            <Format xmlns="syncml:metinf">int</Format>
+        </Meta>
+        <Target>
+            <LocURI>./Device/Vendor/MSFT/Policy/Config/WebThreatDefense/NotifyMalicious</LocURI>
+        </Target>
+        <Data>1</Data>
+    </Item>
+</Replace>
@@ -0,0 +1,13 @@
+<Replace>
+    <!-- Enable Defender SmartScreen to warn users if reusing their work or school
+    password -->
+    <Item>
+        <Meta>
+            <Format xmlns="syncml:metinf">int</Format>
+        </Meta>
+        <Target>
+            <LocURI>./Device/Vendor/MSFT/Policy/Config/WebThreatDefense/NotifyPasswordReuse</LocURI>
+        </Target>
+        <Data>1</Data>
+    </Item>
+</Replace>
@@ -0,0 +1,13 @@
+<Replace>
+    <!-- Enable Defender SmartScreen to warn users if they type their work or school password into
+    text editor apps -->
+    <Item>
+        <Meta>
+            <Format xmlns="syncml:metinf">int</Format>
+        </Meta>
+        <Target>
+            <LocURI>./Device/Vendor/MSFT/Policy/Config/WebThreatDefense/NotifyUnsafeApp</LocURI>
+        </Target>
+        <Data>1</Data>
+    </Item>
+</Replace>