From 3144b1eacc12452c46798ad5afb9bc687f47d11d Mon Sep 17 00:00:00 2001
From: Graham Williams <gray@fleetdm.com>
Date: Wed, 22 Oct 2025 10:09:21 +0100
Subject: [PATCH] Create windows-device-networkaccess-everyonepermissions.xml
 (#34508)

- Uses randomly generated UUID for the CmdID as required by [CmdID
Specs](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-mdm/d7321df8-ecb2-4c81-8a24-54630bc7456f)
- Created **Device** profile to disable the setting as required based on
[Microsoft
Docs](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions#networkaccess_leteveryonepermissionsapplytoanonymoususers)
- Profiles return as **Verified** in FleetUI
- Event Viewer shows no errors

<img width="1468" height="296" alt="image"
src="https://github.com/user-attachments/assets/cfd23f13-c47a-4aa7-a7b3-604ec7421a15"
/>

Co-authored-by: Dale Ribeiro <dale@fleetdm.com>
---
 ...ows-device-networkaccess-everyonepermissions.xml | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 docs/solutions/windows/configuration-profiles/windows-device-networkaccess-everyonepermissions.xml

diff --git a/docs/solutions/windows/configuration-profiles/windows-device-networkaccess-everyonepermissions.xml b/docs/solutions/windows/configuration-profiles/windows-device-networkaccess-everyonepermissions.xml
new file mode 100644
index 0000000000..83aa820dc1
--- /dev/null
+++ b/docs/solutions/windows/configuration-profiles/windows-device-networkaccess-everyonepermissions.xml
@@ -0,0 +1,13 @@
+<Replace>
+  <CmdID>019a01b4-68a6-7aab-a125-fb36dc055a4c</CmdID>
+  <Item>
+    <Target>
+      <LocURI>./Device/Vendor/MSFT/Policy/Config/LocalPoliciesSecurityOptions/NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsers</LocURI>
+    </Target>
+    <Meta>
+      <Format xmlns="syncml:metinf">int</Format>
+    </Meta>
+    <Data>0</Data>
+  </Item>
+</Replace>
+