search

techservicesillinois / SecOps-Powershell-CISDSC

Powershell DSC resources for CIS benchmarks
MIT License
96 stars 26 forks source link

Add warning for stand-alone machines #210

Closed MKletz closed 3 years ago

MKletz commented 3 years ago

Is your feature request related to a problem? Please describe. CIS benchmarks do not support non-domain joined machines so a warning should be given when applying them to one.

Describe the solution you'd like Block application of benchmarks to non-domain machines but allow it to be suppressed with a flag.

Describe alternatives you've considered N/A

Additional context N/A

MKletz commented 3 years ago

After thinking about this it would result in a breaking change. Often times MOFs are not generated on the machine they are configuring and this check would have to be done at generation meaning a default to throw an exception would be a breaking change to existing pipelines. I've added a warning to the README about potential issues applying to off-domain machines.