Ensure 'Minimum encryption settings' is set to 'Enabled: 256'

Nasıl denetlenir

Denetim yöntemi: Windows kayıt defteri

$bad = @(); $bad += @(Get-ChildItem Registry::HKEY_USERS | Where-Object { $_.PSChildName -match '^S-1-5-21-\d+-\d+-\d+-\d+$' } | ForEach-Object { $v = (Get-ItemProperty -Path ('Registry::HKEY_USERS\' + $_.PSChildName + '\SOFTWARE\Policies\Microsoft\office\16.0\outlook\security') -Name 'minenckey' -ErrorAction SilentlyContinue).'minenckey'; if (-not ($null -ne $v -and @(256) -contains [int64]$v)) { $_.PSChildName + ':minenckey=' + $v } }); if ($bad.Count -eq 0) { 'compliant' } else { 'non-compliant: ' + ($bad -join ', ') }

Beklenen çıktı

compliant

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

To establish the recommended state via configuration profiles, set the following Settings Catalog path to Enabled: 256: Microsoft Outlook 2016\Security\Security Form Settings\Outlook Security Mode > Minimum encryption settings Important: For this setting to apply, the Outlook Security Mode setting must be enabled in Microsoft Outlook 2016\Security\Security Form Settings with Use Outlook Security Group Policy selected, as set in this benchmark.

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

tmaegis scan --target intune-office