Intune: Microsoft Office
TMA-INTUNE-OFFICE-2.3.31.2
Ensure 'Suppress external signature services menu item' is set to 'Enabled'
Descripción
This policy setting controls whether Outlook displays the "Add Signature Services" menu item. The recommended state for this setting is: Enabled. Audit: reads the registry value(s) suppressextsigningsvcs that the Intune policy writes for every loaded user profile (HKEY_USERS) and prints compliant only when each satisfies the benchmark value.
Cómo se verifica
Método de auditoría: Registro de Windows
$bad = @(); $bad += @(Get-ChildItem Registry::HKEY_USERS | Where-Object { $_.PSChildName -match '^S-1-5-21-\d+-\d+-\d+-\d+$' } | ForEach-Object { $v = (Get-ItemProperty -Path ('Registry::HKEY_USERS\' + $_.PSChildName + '\SOFTWARE\Policies\Microsoft\office\16.0\common\signatures') -Name 'suppressextsigningsvcs' -ErrorAction SilentlyContinue).'suppressextsigningsvcs'; if (-not ($null -ne $v -and @(1) -contains [int64]$v)) { $_.PSChildName + ':suppressextsigningsvcs=' + $v } }); if ($bad.Count -eq 0) { 'compliant' } else { 'non-compliant: ' + ($bad -join ', ') }- Salida esperada
compliant
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
To establish the recommended state via configuration profiles, set the following Settings Catalog path to Enabled: Microsoft Office 2016\Signing\Suppress external signature services menu item
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- intune-officeintuneregistry
- Referencia
- CIS Microsoft Intune for Office Benchmark v1.1.0 - 2.3.31.2 Ensure 'Suppress external signature services menu item' is set to 'Enabled'
Verificar este host
Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.
tmaegis scan --target intune-office