Ensure 'Turn off all Windows spotlight features' is set to 'Enabled'

OrtaDüzey 2Otomatikwindows

Açıklama

This policy setting lets you turn off all Windows Spotlight features at once. The recommended state for this setting is: Enabled. Note: Per Microsoft TechNet, this policy setting only applies to Windows 10 Enterprise and Windows 10 Education editions.

Nasıl denetlenir

Denetim yöntemi: Windows kayıt defteri

registry

$bad = @(); $bad += @(Get-ChildItem Registry::HKEY_USERS | Where-Object { $_.PSChildName -match '^S-1-5-21-\d+-\d+-\d+-\d+$' } | ForEach-Object { $v = (Get-ItemProperty -Path ('Registry::HKEY_USERS\' + $_.PSChildName + '\[USERSID]\Software\Policies\Microsoft\Windows\CloudContent') -Name 'DisableWindowsSpotlightFeatures' -ErrorAction SilentlyContinue).'DisableWindowsSpotlightFeatures'; if (-not ($null -ne $v -and @(1) -contains [int64]$v)) { $_.PSChildName + ':DisableWindowsSpotlightFeatures=' + $v } }); if ($bad.Count -eq 0) { 'compliant' } else { 'non-compliant: ' + ($bad -join ', ') }

Beklenen çıktı: compliant

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Configure through Group Policy (User Configuration): User Configuration\Policies\Administrative Templates\Windows Components\Cloud Content\Turn off all Windows spotlight features

Özellikler

İşletim sistemleri: windows-server-2025-dc, windows-server-2025-ms
Etiketler: cis-convertedregistrywindows
Referans: CIS Microsoft Windows Server 2025 Benchmark v2.1.0 - 19.7.8.4

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target windows --level 2