:::MENU:::

Ignore the default list of blocked TPM commands



This policy setting allows you to enforce or ignore the computer’s default list of blocked Trusted Platform Module (TPM) commands. If you enable this policy setting Windows will ignore the computer’s default list of blocked TPM commands and will only block those TPM commands specified by Group Policy or the local list. The default list of blocked TPM commands is pre-configured by Windows. You can view the default list by running “tpm. msc” navigating to the “Command Management” section and making visible the “On Default Block List” column. The local list of blocked TPM commands is configured outside of Group Policy by running “tpm. msc” or through scripting against the Win32_Tpm interface. See the related policy setting to configure the Group Policy list of blocked TPM commands. If you disable or do not configure this policy setting Windows will block the TPM commands in the default list in addition to commands in the Group Policy and local lists of blocked TPM commands.


Additional Information

  1. Registry path is:

    HKEY_LOCAL_MACHINE -> Software -> Policies -> Microsoft -> TPM -> BlockedCommands # IgnoreDefaultList

  2. The Administrative Template path is:

    System -> Trusted Platform Module Services

Notes

* Making mistakes while changing registry values can affect your system adversely. We recommend you to create a System Restore point before making registry manipulation. If you're new to Registry Editor, read this beginner's guide.
** To locate the registry and administrative template path, checkout beginner's guide.
You're here :
Checkout Kapil Sparks™