PROCESS_MITIGATION_BINARY_SIGNATURE_POLICY structure

[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.]

Contains process mitigation policy settings for the loading of images depending on the signatures for the image.

Syntax


typedef struct _PROCESS_MITIGATION_BINARY_SIGNATURE_POLICY {
  union {
    DWORD  Flags;
    struct {
      DWORD MicrosoftSignedOnly  :1;
      DWORD StoreSignedOnly  :1;
      DWORD MitigationOptIn  :1;
      DWORD ReservedFlags  :29;
    };
  };
} PROCESS_MITIGATION_BINARY_SIGNATURE_POLICY, *PPROCESS_MITIGATION_BINARY_SIGNATURE_POLICY;

Members

Flags

Reserved for system use.

MicrosoftSignedOnly

Set (0x1) to prevent the process from loading images that are not signed by Microsoft; otherwise leave unset (0x0).

StoreSignedOnly

Set (0x1) to prevent the process from loading images that are not signed by the Windows Store; otherwise leave unset (0x0).

MitigationOptIn

Set (0x1) to prevent the process from loading images that are not signed by Microsoft, the Windows Store and the Windows Hardware Quality Labs (WHQL); otherwise leave unset (0x0).

ReservedFlags

Reserved for system use.

Requirements

Minimum supported client

Windows 10 [desktop apps only]

Minimum supported server

Windows Server 2016 [desktop apps only]

Header

WinNT.h

See also

GetProcessMitigationPolicy
SetProcessMitigationPolicy

 

 

Show: