Читать книгу Windows Server 2022 & Powershell All-in-One For Dummies - Sara Perrott - Страница 118

The Device Health Attestation role was added in Windows Server 2016. It gives administrators a way to verify that a device is healthy as it boots. It can measure several different settings and is configured with whichever settings the system administrator or network administrator wants to track. This role is often used for systems to validate that they’re safe before they’re allowed to connect through remote access services like DirectAccess or other virtual private network (VPN) services.

The settings Device Health Attestation can validate include the following:

 Is BitLocker enabled?

 Is Early Launch Anti-Malware (ELAM) enabled?

 Is Secure Boot enabled?

 Is Code Integrity enabled?