1E Verified
Copyright © 1E 2022 All Rights Reserved
Windows Security Profile
Downloads
241
Endorsements
19
Components
13
Added
3 years ago
Last Updated
1 month ago
Compatibility
Client Supported - 23.11, 23.7, 8.1, 8.2, 8.4, 9.0
OS Supported - Microsoft Windows 11, 10
OS Supported - Microsoft Windows 11, 10
Description
Report device compliance regarding the status of the Credential Guard, Smartscreen, Bitlocker, Windows Update and Windows Defender Antivirus security components of the Microsoft Operating System as compared against a configurable reference baseline. This will increase security across your enterprise and minimize opportunities for cyberattacks.
Key Features
- Monitor the compliance of the security updates for Microsoft Antivirus for all the devices in the network in order to identify devices that are non-compliant and may be vulnerable to cyberattacks.
- Identify which devices have hard drives that are not encrypted using BitLocker encryption, thereby identifying devices with poor data security.
Setup
- This Product Pack contains both Rules and instructions.
- Upload this Product pack with the help of Tachyon Product Pack Deployment Tool.
- A Guaranteed State Policy named Windows Security Profile will be created.
- Guaranteed State Rules will be created in this policy.
- An Instruction set named Windows Security Profile containing all the instructions will be created.
Usage
- Review any rule, For Example Check default anti-virus solution is Windows Defender.
- The precondition ensures it run only on Windows devices.
- Adjust the Trigger IntervalHours to meet your requirement.
- The Check if Windows Defender is the default antivirus or not on the devices.
- Review all the rules in this Policy before deploying it.
- Assign the Windows Security Profile Policy to a management group.
- Deploy the Windows Security Profile Policy.
- Within a period of a day or more you would start seeing the compliance reports on Windows Defender and other rules.
- We can also manually run instruction from Explorer to perform various actions or questions related to Windows Security Profile.
Components
1E-Exchange-LocationSettingsChange
INSTRUCTION
Description
Set device and user settings for Windows Location Services
Readable Payload
Set location privacy settings for Device and all users to %Setting%
1E-Exchange-LocationSettingsList
INSTRUCTION
Description
Lists device and user settings for Windows Location Services
Readable Payload
List Location privacy settings
What's New
14 March 2024:
Bug fix on get BitLocker status.
25 July 2023:
Added non-English OS languages support to BitLocker rule.