eneerge / CIS-Microsoft-Intune-For-Windows-IntuneProfile

36 stars 12 forks source link

Some policies aren't merging properly #4

Closed eneerge closed 8 months ago

eneerge commented 8 months ago

These policies aren't merging properly:

./Device/Vendor/MSFT/Policy/Config/UserRights/DenyAccessFromNetwork ./Device/Vendor/MSFT/Policy/Config/UserRights/AccessFromNetwork ./Device/Vendor/MSFT/Policy/Config/UserRights/DenyRemoteDesktopServicesLogOn ./Device/Vendor/MSFT/Policy/Config/UserRights/GenerateSecurityAudits ./Device/Vendor/MSFT/Policy/Config/UserRights/AllowLocalLogOn ./Device/Vendor/MSFT/Policy/Config/UserRights/ImpersonateClient ./Device/Vendor/MSFT/Policy/Config/UserRights/DenyLogOnAsService ./Device/Vendor/MSFT/Policy/Config/UserRights/IncreaseSchedulingPriority ./Device/Vendor/MSFT/Policy/Config/Privacy/LetAppsActivateWithVoiceAboveLock ./Device/Vendor/MSFT/Policy/Config/Connectivity/HardenedUNCPaths ./Device/Vendor/MSFT/Policy/Config/ADMX_Sharing/DisableHomeGroup ./Device/Vendor/MSFT/Policy/Config/InternetExplorer/DisableInternetExplorerApp ./Device/Vendor/MSFT/Policy/Config/ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ASR_Rules ./Device/Vendor/MSFT/Policy/Config/ApplicationManagement/AllowAppStoreAutoUpdate ./Device/Vendor/MSFT/Policy/Config/ADMX_PowerShellExecutionPolicy/EnableTranscripting ./Device/Vendor/MSFT/Policy/Config/UserRights/ChangeSystemTime ./Device/Vendor/MSFT/Policy/Config/UserRights/CreateGlobalObjects

eneerge commented 8 months ago

Some configurations aren't maintaining the correct unicode value () after importing.

eneerge commented 8 months ago

By passing in the unicode value as \uf000, it will maintain during import.

eneerge commented 8 months ago

After fixing unicode values, these are still failing: ./Device/Vendor/MSFT/Policy/Config/UserRights/DenyLogOnAsService ./Device/Vendor/MSFT/Policy/Config/Privacy/LetAppsActivateWithVoiceAboveLock ./Device/Vendor/MSFT/Policy/Config/ADMX_Sharing/DisableHomeGroup ./Device/Vendor/MSFT/Policy/Config/InternetExplorer/DisableInternetExplorerApp ./Device/Vendor/MSFT/Policy/Config/ApplicationManagement/AllowAppStoreAutoUpdate ./Device/Vendor/MSFT/Policy/Config/ADMX_PowerShellExecutionPolicy/EnableTranscripting

eneerge commented 8 months ago

Resolved all except for: ./Device/Vendor/MSFT/Policy/Config/Privacy/LetAppsActivateWithVoiceAboveLock ./Device/Vendor/MSFT/Policy/Config/UserRights/DenyLogOnAsService

eneerge commented 8 months ago

Separate issues will be created for these two.