Ensure 'Minimum encryption settings' is set to 'Enabled: 256'

So wird geprüft

Prüfmethode: Windows-Registrierung

$bad = @(); $bad += @(Get-ChildItem Registry::HKEY_USERS | Where-Object { $_.PSChildName -match '^S-1-5-21-\d+-\d+-\d+-\d+$' } | ForEach-Object { $v = (Get-ItemProperty -Path ('Registry::HKEY_USERS\' + $_.PSChildName + '\SOFTWARE\Policies\Microsoft\office\16.0\outlook\security') -Name 'minenckey' -ErrorAction SilentlyContinue).'minenckey'; if (-not ($null -ne $v -and @(256) -contains [int64]$v)) { $_.PSChildName + ':minenckey=' + $v } }); if ($bad.Count -eq 0) { 'compliant' } else { 'non-compliant: ' + ($bad -join ', ') }

Erwartete Ausgabe

compliant

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

To establish the recommended state via configuration profiles, set the following Settings Catalog path to Enabled: 256: Microsoft Outlook 2016\Security\Security Form Settings\Outlook Security Mode > Minimum encryption settings Important: For this setting to apply, the Outlook Security Mode setting must be enabled in Microsoft Outlook 2016\Security\Security Form Settings with Use Outlook Security Group Policy selected, as set in this benchmark.

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

tmaegis scan --target intune-office