Intune: Microsoft Office
TMA-INTUNE-OFFICE-2.3.31.2
Ensure 'Suppress external signature services menu item' is set to 'Enabled'
Description
This policy setting controls whether Outlook displays the "Add Signature Services" menu item. The recommended state for this setting is: Enabled. Audit: reads the registry value(s) suppressextsigningsvcs that the Intune policy writes for every loaded user profile (HKEY_USERS) and prints compliant only when each satisfies the benchmark value.
Méthode de vérification
Méthode d'audit: Registre Windows
$bad = @(); $bad += @(Get-ChildItem Registry::HKEY_USERS | Where-Object { $_.PSChildName -match '^S-1-5-21-\d+-\d+-\d+-\d+$' } | ForEach-Object { $v = (Get-ItemProperty -Path ('Registry::HKEY_USERS\' + $_.PSChildName + '\SOFTWARE\Policies\Microsoft\office\16.0\common\signatures') -Name 'suppressextsigningsvcs' -ErrorAction SilentlyContinue).'suppressextsigningsvcs'; if (-not ($null -ne $v -and @(1) -contains [int64]$v)) { $_.PSChildName + ':suppressextsigningsvcs=' + $v } }); if ($bad.Count -eq 0) { 'compliant' } else { 'non-compliant: ' + ($bad -join ', ') }- Sortie attendue
compliant
Méthode de correction
Méthode de correction: Recommandation ou correctif d'infrastructure
To establish the recommended state via configuration profiles, set the following Settings Catalog path to Enabled: Microsoft Office 2016\Signing\Suppress external signature services menu item
Propriétés
- Systèmes d'exploitation
- Tous
- Étiquettes
- intune-officeintuneregistry
- Référence
- CIS Microsoft Intune for Office Benchmark v1.1.0 - 2.3.31.2 Ensure 'Suppress external signature services menu item' is set to 'Enabled'
Vérifier cet hôte
Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.
tmaegis scan --target intune-office