TMA-INTUNE-OFFICE-2.5.14.3.30
Ensure 'Signature Warning' is set to 'Enabled: Always warn about invalid signatures'
Opis
This policy setting controls how Outlook warns users about messages with invalid digital signatures. The recommended state for this setting is: Enabled: Always warn about invalid signatures. Audit: reads the registry value(s) warnaboutinvalid that the Intune policy writes for every loaded user profile (HKEY_USERS) and prints compliant only when each satisfies the benchmark value.
Kako se proverava
Metod provere: Windows registar
$bad = @(); $bad += @(Get-ChildItem Registry::HKEY_USERS | Where-Object { $_.PSChildName -match '^S-1-5-21-\d+-\d+-\d+-\d+$' } | ForEach-Object { $v = (Get-ItemProperty -Path ('Registry::HKEY_USERS\' + $_.PSChildName + '\SOFTWARE\Policies\Microsoft\office\16.0\outlook\security') -Name 'warnaboutinvalid' -ErrorAction SilentlyContinue).'warnaboutinvalid'; if (-not ($null -ne $v -and @(1) -contains [int64]$v)) { $_.PSChildName + ':warnaboutinvalid=' + $v } }); if ($bad.Count -eq 0) { 'compliant' } else { 'non-compliant: ' + ($bad -join ', ') }- Očekivani izlaz
compliant
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
To establish the recommended state via configuration profiles, set the following Settings Catalog path to Enabled: Always warn about invalid signatures: Microsoft Outlook 2016\Security\Security Form Settings\Outlook Security Mode > Signature Warning Important: For this setting to apply, the Outlook Security Mode setting must be enabled in Microsoft Outlook 2016\Security\Security Form Settings with Use Outlook Security Group Policy selected, as set in this benchmark.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- intune-officeintuneregistry
- Referenca
- CIS Microsoft Intune for Office Benchmark v1.1.0 - 2.5.14.3.30 Ensure 'Signature Warning' is set to 'Enabled: Always warn about invalid signatures'
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
tmaegis scan --target intune-office