Quantcast
Channel: Security and Compliance Management forum
Viewing all articles
Browse latest Browse all 481

Policies missing in SCM Windows 8.1 Security Compliance Baseline v1.0

$
0
0

Hello,

I have installed SCM 3.0.60 (downloaded from this link: Microsoft Security Compliance Manager) on a Windows 8.1 Virtual Machine. Because I could not connect my VM to internet at the moment, I imported the Windows 8.1 Security Compliance Baseline (downloaded from this link SCM Baselines for Windows 8.1, IE 11 and Server 2012 R2 are now live!) and the baseline attachment in SCM. The import process ran well and I then created a custom baseline based on the Win8.1 Computer Security Compliance 1.0 baseline (using the Duplicate action in SCM). During my customization I have noticed that some policies were missing from my custom baseline. After verifying the original baseline I have noticed that the policies were missing in it also. I connected my VM to the internet and clicked on the Download Microsoft baselines automatically action in SCM. SCM downloaded additional baselines (Office 2013, SQL Server 2012,...). I was expecting the Win8.1 baseline to be updated but it was not. The policies are still missing and I cannot complete my customization. For information the missing policies that I've noticed are the following:

Under Computer Configuration\Administrative Templates\Windows Components\File Explorer
 All policies are missing except "Configure Windows SmartScreen" and "Turn off Data Execution Prevention for Explorer"

Under Computer Configuration\Administrative Templates\Windows Components\Syncyour settings theses polices are missing:
 --> Do not sync
 --> Do not sync app settings
 --> Do not sync browser settings
 --> Do not sync desktop personalization
 --> Do not sync on metered connections
 --> Do not sync other Windows Settings
 --> Do not sync passwords
 --> Do not sync personalize

Under Computer Configuration\Administrative Templates\System\KDC these policies are missing
 --> KDC support for claims, compound authentication and Kerberos armoring
 --> User forest search order
 --> Warning for large Kerberos tickets
 --> Provide information about previous logons to client computer

It seems that theses policies are not present in the Package.XML file that is included in the Windows-8.1-Security-Compliance-Baseline.cab.

Does anyone ever experience the same issue?

Anyone know if there is an updated version of the Windows 8.1 Security Compliance Baseline ? (the version downloaded from the link i supplied above is v1.0)

Regards,

François


Viewing all articles
Browse latest Browse all 481

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>