how to enable the secure boot and code integrity in cloud PC Windows365 devices

Question

how to enable the secure boot and code integrity in cloud PC Windows365 devices

Richa Kumari 321

Hello ,

We have deployed some cloud PCs ,time to time ,among some of cloud PC is compliant and some are non-compliant ,on further investigation found that the reason for non-compliant of Cloud PC s is due to secure boot and code integrity as mentioned in below

User's image

is any way that Cloud pc will automatically enable these settings for old provisioned devices also. as per my knowledge, it is enabled for new devices
How to manually enable these setting on cloud pc or through Intune or any other way to enable these setting on cloud pc.

Richa Kumari 321 Reputation points

2023-08-11T06:56:46.5466667+00:00

it is enabled for new provisioned device not old provisioned get updated
Richa Kumari 321 Reputation points

2023-08-11T06:59:19.2033333+00:00

Thanks a lot for your efforts, I applied filter to compliance policy that cause error so that it will not applied on that particular devices old provisioned device that non compliant .then create new compliance specific to non-complaint cloud pc.

Answer accepted by question author

0 additional answers

Your answer

Richa Kumari 321 Reputation points

2023-08-11T06:56:46.5466667+00:00

it is enabled for new provisioned device not old provisioned get updated
Richa Kumari 321 Reputation points

2023-08-11T06:59:19.2033333+00:00

Thanks a lot for your efforts, I applied filter to compliance policy that cause error so that it will not applied on that particular devices old provisioned device that non compliant .then create new compliance specific to non-complaint cloud pc.

Answer 1

Crystal-MSFT 54,201 Microsoft External Staff

@Richa Kumari, Thanks for posting in Q&A. Based as I know, the Secure Boot is enabled on Windows 365 Cloud PC by default.

https://learn.microsoft.com/en-us/windows-365/enterprise/security#security-features-enabled-by-default

After researching more, I find a known issue that "Require Secure Boot to be enabled on the device" shows as not compliant. To enable secure boot on the Cloud PC, you can reprovision the specific Cloud PC

https://learn.microsoft.com/en-us/windows-365/enterprise/known-issues-enterprise#cloud-pc-reports-as-not-compliant-for-compliance-policy

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Richa Kumari 321 Reputation points

2023-08-11T06:55:00.44+00:00

Thanks lots for your efforts,It is valuable for me.
I tried to create filter on existing policy that cause error, then created new compliance policy specific for cloud pc that non-compliant
Crystal-MSFT 54,201 Reputation points Microsoft External Staff

2023-08-11T07:09:31.5+00:00

@Richa Kumari, Thanks for the reply. I am glad the information can help. And thanks for your sharing.

Again thanks for your time and have a nice day!
Richa Kumari 321 Reputation points

2023-08-16T12:04:32.3366667+00:00

One thing also that some of old device is getting secure boot enabled after some time automatically ,some of still not yet for that I applied filter but is any specific update that need to apply to automatically enable the secure boot in cloud pc.
Crystal-MSFT 54,201 Reputation points Microsoft External Staff

2023-08-17T02:18:05.7166667+00:00

@Richa Kumari, Thanks for the reply. After researching, I didn't find any official article mentioned any update to automatically enable the secure boot. You can open case to double confirm on this.

https://learn.microsoft.com/en-us/mem/get-support

Share via

how to enable the secure boot and code integrity in cloud PC Windows365 devices

0 additional answers

Your answer