Ensure 'Minimum encryption settings' is set to 'Enabled: 256'

Kako se proverava

Metod provere: Windows registar

$bad = @(); $bad += @(Get-ChildItem Registry::HKEY_USERS | Where-Object { $_.PSChildName -match '^S-1-5-21-\d+-\d+-\d+-\d+$' } | ForEach-Object { $v = (Get-ItemProperty -Path ('Registry::HKEY_USERS\' + $_.PSChildName + '\SOFTWARE\Policies\Microsoft\office\16.0\outlook\security') -Name 'minenckey' -ErrorAction SilentlyContinue).'minenckey'; if (-not ($null -ne $v -and @(256) -contains [int64]$v)) { $_.PSChildName + ':minenckey=' + $v } }); if ($bad.Count -eq 0) { 'compliant' } else { 'non-compliant: ' + ($bad -join ', ') }

Očekivani izlaz

compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

To establish the recommended state via configuration profiles, set the following Settings Catalog path to Enabled: 256: Microsoft Outlook 2016\Security\Security Form Settings\Outlook Security Mode > Minimum encryption settings Important: For this setting to apply, the Outlook Security Mode setting must be enabled in Microsoft Outlook 2016\Security\Security Form Settings with Use Outlook Security Group Policy selected, as set in this benchmark.

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

tmaegis scan --target intune-office