-
Notifications
You must be signed in to change notification settings - Fork 0
/
CON_Win10BASICDR.ps1
317 lines (304 loc) · 14.1 KB
/
CON_Win10BASICDR.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
$Win10BASICDR = @"
{
"@odata.type": "#microsoft.graph.windows10GeneralConfiguration",
"deviceManagementApplicabilityRuleOsEdition": null,
"deviceManagementApplicabilityRuleOsVersion": null,
"deviceManagementApplicabilityRuleDeviceMode": null,
"description": "Basic security profile for Windows 10 that is also BYOD friendly.",
"displayName": "Portall - Windows 10 - Standard Device Security",
"taskManagerBlockEndTask": false,
"energySaverOnBatteryThresholdPercentage": 0,
"energySaverPluggedInThresholdPercentage": 0,
"powerLidCloseActionOnBattery": "notConfigured",
"powerLidCloseActionPluggedIn": "notConfigured",
"powerButtonActionOnBattery": "notConfigured",
"powerButtonActionPluggedIn": "notConfigured",
"powerSleepButtonActionOnBattery": "notConfigured",
"powerSleepButtonActionPluggedIn": "notConfigured",
"powerHybridSleepOnBattery": "enabled",
"powerHybridSleepPluggedIn": "enabled",
"windows10AppsForceUpdateSchedule": null,
"enableAutomaticRedeployment": false,
"microsoftAccountSignInAssistantSettings": "notConfigured",
"authenticationAllowSecondaryDevice": true,
"authenticationWebSignIn": "notConfigured",
"authenticationPreferredAzureADTenantDomainName": null,
"cryptographyAllowFipsAlgorithmPolicy": false,
"displayAppListWithGdiDPIScalingTurnedOn": [
],
"displayAppListWithGdiDPIScalingTurnedOff": [
],
"enterpriseCloudPrintDiscoveryEndPoint": null,
"enterpriseCloudPrintOAuthAuthority": null,
"enterpriseCloudPrintOAuthClientIdentifier": null,
"enterpriseCloudPrintResourceIdentifier": null,
"enterpriseCloudPrintDiscoveryMaxLimit": null,
"enterpriseCloudPrintMopriaDiscoveryResourceIdentifier": null,
"experienceDoNotSyncBrowserSettings": "notConfigured",
"messagingBlockSync": false,
"messagingBlockMMS": false,
"messagingBlockRichCommunicationServices": false,
"printerNames": [
],
"printerDefaultName": null,
"printerBlockAddition": false,
"searchBlockDiacritics": false,
"searchDisableAutoLanguageDetection": false,
"searchDisableIndexingEncryptedItems": false,
"searchEnableRemoteQueries": false,
"searchDisableUseLocation": false,
"searchDisableLocation": false,
"searchDisableIndexerBackoff": false,
"searchDisableIndexingRemovableDrive": false,
"searchEnableAutomaticIndexSizeManangement": false,
"searchBlockWebResults": false,
"securityBlockAzureADJoinedDevicesAutoEncryption": false,
"diagnosticsDataSubmissionMode": "none",
"oneDriveDisableFileSync": false,
"systemTelemetryProxyServer": null,
"edgeTelemetryForMicrosoft365Analytics": "notConfigured",
"inkWorkspaceAccess": "notConfigured",
"inkWorkspaceAccessState": "notConfigured",
"inkWorkspaceBlockSuggestedApps": false,
"smartScreenEnableAppInstallControl": false,
"smartScreenAppInstallControl": "notConfigured",
"personalizationDesktopImageUrl": null,
"personalizationLockScreenImageUrl": null,
"bluetoothAllowedServices": [
],
"bluetoothBlockAdvertising": false,
"bluetoothBlockPromptedProximalConnections": false,
"bluetoothBlockDiscoverableMode": false,
"bluetoothBlockPrePairing": false,
"edgeBlockAutofill": false,
"edgeBlocked": false,
"edgeCookiePolicy": "userDefined",
"edgeBlockDeveloperTools": false,
"edgeBlockSendingDoNotTrackHeader": false,
"edgeBlockExtensions": false,
"edgeBlockInPrivateBrowsing": false,
"edgeBlockJavaScript": false,
"edgeBlockPasswordManager": false,
"edgeBlockAddressBarDropdown": false,
"edgeBlockCompatibilityList": false,
"edgeClearBrowsingDataOnExit": false,
"edgeAllowStartPagesModification": false,
"edgeDisableFirstRunPage": false,
"edgeBlockLiveTileDataCollection": false,
"edgeSyncFavoritesWithInternetExplorer": false,
"edgeFavoritesListLocation": null,
"edgeBlockEditFavorites": false,
"edgeNewTabPageURL": null,
"edgeHomeButtonConfiguration": null,
"edgeHomeButtonConfigurationEnabled": false,
"edgeOpensWith": "notConfigured",
"edgeBlockSideloadingExtensions": false,
"edgeRequiredExtensionPackageFamilyNames": [
],
"edgeBlockPrinting": false,
"edgeFavoritesBarVisibility": "notConfigured",
"edgeBlockSavingHistory": false,
"edgeBlockFullScreenMode": false,
"edgeBlockWebContentOnNewTabPage": false,
"edgeBlockTabPreloading": false,
"edgeBlockPrelaunch": false,
"edgeShowMessageWhenOpeningInternetExplorerSites": "notConfigured",
"edgePreventCertificateErrorOverride": false,
"edgeKioskModeRestriction": "notConfigured",
"edgeKioskResetAfterIdleTimeInMinutes": null,
"cellularBlockDataWhenRoaming": false,
"cellularBlockVpn": false,
"cellularBlockVpnWhenRoaming": false,
"cellularData": "allowed",
"defenderBlockEndUserAccess": false,
"defenderDaysBeforeDeletingQuarantinedMalware": 5,
"defenderSystemScanSchedule": "userDefined",
"defenderFilesAndFoldersToExclude": [
],
"defenderFileExtensionsToExclude": [
],
"defenderScanMaxCpu": 50,
"defenderMonitorFileActivity": "monitorIncomingFilesOnly",
"defenderPotentiallyUnwantedAppAction": "audit",
"defenderPotentiallyUnwantedAppActionSetting": "auditMode",
"defenderProcessesToExclude": [
],
"defenderPromptForSampleSubmission": "promptBeforeSendingPersonalData",
"defenderRequireBehaviorMonitoring": true,
"defenderRequireCloudProtection": true,
"defenderRequireNetworkInspectionSystem": true,
"defenderRequireRealTimeMonitoring": true,
"defenderScanArchiveFiles": true,
"defenderScanDownloads": true,
"defenderScheduleScanEnableLowCpuPriority": false,
"defenderDisableCatchupQuickScan": false,
"defenderDisableCatchupFullScan": false,
"defenderScanNetworkFiles": true,
"defenderScanIncomingMail": true,
"defenderScanMappedNetworkDrivesDuringFullScan": false,
"defenderScanRemovableDrivesDuringFullScan": true,
"defenderScanScriptsLoadedInInternetExplorer": true,
"defenderSignatureUpdateIntervalInHours": 2,
"defenderScanType": "userDefined",
"defenderScheduledScanTime": null,
"defenderScheduledQuickScanTime": null,
"defenderCloudBlockLevel": "notConfigured",
"defenderCloudExtendedTimeout": null,
"defenderCloudExtendedTimeoutInSeconds": null,
"defenderBlockOnAccessProtection": false,
"defenderSubmitSamplesConsentType": "sendSafeSamplesAutomatically",
"lockScreenAllowTimeoutConfiguration": false,
"lockScreenBlockActionCenterNotifications": false,
"lockScreenBlockCortana": false,
"lockScreenBlockToastNotifications": false,
"lockScreenTimeoutInSeconds": null,
"lockScreenActivateAppsWithVoice": "notConfigured",
"passwordBlockSimple": true,
"passwordExpirationDays": null,
"passwordMinimumLength": 8,
"passwordMinutesOfInactivityBeforeScreenTimeout": 15,
"passwordMinimumCharacterSetCount": 3,
"passwordPreviousPasswordBlockCount": null,
"passwordRequired": true,
"passwordRequireWhenResumeFromIdleState": false,
"passwordRequiredType": "alphanumeric",
"passwordSignInFailureCountBeforeFactoryReset": 10,
"passwordMinimumAgeInDays": null,
"privacyAdvertisingId": "notConfigured",
"privacyAutoAcceptPairingAndConsentPrompts": false,
"privacyDisableLaunchExperience": false,
"privacyBlockInputPersonalization": false,
"privacyBlockPublishUserActivities": false,
"privacyBlockActivityFeed": false,
"startBlockUnpinningAppsFromTaskbar": false,
"startMenuAppListVisibility": "userDefined",
"startMenuHideChangeAccountSettings": false,
"startMenuHideFrequentlyUsedApps": false,
"startMenuHideHibernate": false,
"startMenuHideLock": false,
"startMenuHidePowerButton": false,
"startMenuHideRecentJumpLists": false,
"startMenuHideRecentlyAddedApps": false,
"startMenuHideRestartOptions": false,
"startMenuHideShutDown": false,
"startMenuHideSignOut": false,
"startMenuHideSleep": false,
"startMenuHideSwitchAccount": false,
"startMenuHideUserTile": false,
"startMenuLayoutEdgeAssetsXml": null,
"startMenuLayoutXml": null,
"startMenuMode": "userDefined",
"startMenuPinnedFolderDocuments": "notConfigured",
"startMenuPinnedFolderDownloads": "notConfigured",
"startMenuPinnedFolderFileExplorer": "notConfigured",
"startMenuPinnedFolderHomeGroup": "notConfigured",
"startMenuPinnedFolderMusic": "notConfigured",
"startMenuPinnedFolderNetwork": "notConfigured",
"startMenuPinnedFolderPersonalFolder": "notConfigured",
"startMenuPinnedFolderPictures": "notConfigured",
"startMenuPinnedFolderSettings": "notConfigured",
"startMenuPinnedFolderVideos": "notConfigured",
"settingsBlockSettingsApp": false,
"settingsBlockSystemPage": false,
"settingsBlockDevicesPage": false,
"settingsBlockNetworkInternetPage": false,
"settingsBlockPersonalizationPage": false,
"settingsBlockAccountsPage": false,
"settingsBlockTimeLanguagePage": false,
"settingsBlockEaseOfAccessPage": false,
"settingsBlockPrivacyPage": false,
"settingsBlockUpdateSecurityPage": false,
"settingsBlockAppsPage": false,
"settingsBlockGamingPage": false,
"windowsSpotlightBlockConsumerSpecificFeatures": false,
"windowsSpotlightBlocked": false,
"windowsSpotlightBlockOnActionCenter": false,
"windowsSpotlightBlockTailoredExperiences": false,
"windowsSpotlightBlockThirdPartyNotifications": false,
"windowsSpotlightBlockWelcomeExperience": false,
"windowsSpotlightBlockWindowsTips": false,
"windowsSpotlightConfigureOnLockScreen": "notConfigured",
"networkProxyApplySettingsDeviceWide": false,
"networkProxyDisableAutoDetect": false,
"networkProxyAutomaticConfigurationUrl": null,
"networkProxyServer": null,
"accountsBlockAddingNonMicrosoftAccountEmail": false,
"antiTheftModeBlocked": false,
"bluetoothBlocked": false,
"cameraBlocked": false,
"connectedDevicesServiceBlocked": false,
"certificatesBlockManualRootCertificateInstallation": false,
"copyPasteBlocked": false,
"cortanaBlocked": false,
"deviceManagementBlockFactoryResetOnMobile": false,
"deviceManagementBlockManualUnenroll": false,
"safeSearchFilter": "userDefined",
"edgeBlockPopups": false,
"edgeBlockSearchSuggestions": false,
"edgeBlockSearchEngineCustomization": false,
"edgeBlockSendingIntranetTrafficToInternetExplorer": false,
"edgeSendIntranetTrafficToInternetExplorer": false,
"edgeRequireSmartScreen": true,
"edgeEnterpriseModeSiteListLocation": null,
"edgeFirstRunUrl": null,
"edgeSearchEngine": null,
"edgeHomepageUrls": [
],
"edgeBlockAccessToAboutFlags": false,
"smartScreenBlockPromptOverride": false,
"smartScreenBlockPromptOverrideForFiles": false,
"webRtcBlockLocalhostIpAddress": false,
"internetSharingBlocked": false,
"settingsBlockAddProvisioningPackage": false,
"settingsBlockRemoveProvisioningPackage": false,
"settingsBlockChangeSystemTime": false,
"settingsBlockEditDeviceName": false,
"settingsBlockChangeRegion": false,
"settingsBlockChangeLanguage": false,
"settingsBlockChangePowerSleep": false,
"locationServicesBlocked": false,
"microsoftAccountBlocked": false,
"microsoftAccountBlockSettingsSync": false,
"nfcBlocked": false,
"resetProtectionModeBlocked": false,
"screenCaptureBlocked": false,
"storageBlockRemovableStorage": false,
"storageRequireMobileDeviceEncryption": false,
"usbBlocked": false,
"voiceRecordingBlocked": false,
"wiFiBlockAutomaticConnectHotspots": false,
"wiFiBlocked": false,
"wiFiBlockManualConfiguration": false,
"wiFiScanInterval": null,
"wirelessDisplayBlockProjectionToThisDevice": false,
"wirelessDisplayBlockUserInputFromReceiver": false,
"wirelessDisplayRequirePinForPairing": false,
"windowsStoreBlocked": false,
"appsAllowTrustedAppsSideloading": "notConfigured",
"windowsStoreBlockAutoUpdate": false,
"developerUnlockSetting": "notConfigured",
"sharedUserAppDataAllowed": false,
"appsBlockWindowsStoreOriginatedApps": false,
"windowsStoreEnablePrivateStoreOnly": false,
"storageRestrictAppDataToSystemVolume": false,
"storageRestrictAppInstallToSystemVolume": false,
"gameDvrBlocked": false,
"experienceBlockDeviceDiscovery": false,
"experienceBlockErrorDialogWhenNoSIM": false,
"experienceBlockTaskSwitcher": false,
"logonBlockFastUserSwitching": false,
"tenantLockdownRequireNetworkDuringOutOfBoxExperience": false,
"appManagementMSIAllowUserControlOverInstall": false,
"appManagementMSIAlwaysInstallWithElevatedPrivileges": false,
"dataProtectionBlockDirectMemoryAccess": false,
"appManagementPackageFamilyNamesToLaunchAfterLogOn": [
],
"uninstallBuiltInApps": false,
"defenderDetectedMalwareActions": {
"lowSeverity": "clean",
"moderateSeverity": "quarantine",
"highSeverity": "remove",
"severeSeverity": "block"
}
}
"@