From 573d493bb5561b1cf62e4142e2100bcef93395b5 Mon Sep 17 00:00:00 2001 From: Dale Ribeiro Date: Mon, 3 Nov 2025 11:30:04 -0500 Subject: [PATCH] Dale solutions cleanup 2 (#35108) **Related issue:** Resolves # # Checklist for submitter If some of the following don't apply, delete the relevant line. - [ ] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. See [Changes files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files) for more information. - [ ] Input data is properly validated, `SELECT *` is avoided, SQL injection is prevented (using placeholders for values in statements) - [ ] If paths of existing endpoints are modified without backwards compatibility, checked the frontend/CLI for any necessary changes ## Testing - [ ] Added/updated automated tests - [ ] Where appropriate, [automated tests simulate multiple hosts and test for host isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing) (updates to one hosts's records do not affect another) - [ ] QA'd all new/changed functionality manually For unreleased bug fixes in a release candidate, one of: - [ ] Confirmed that the fix is not expected to adversely impact load test results - [ ] Alerted the release DRI if additional load testing is needed ## Database migrations - [ ] Checked schema for all modified table for columns that will auto-update timestamps during migration. - [ ] Confirmed that updating the timestamps is acceptable, and will not cause unwanted side effects. - [ ] Ensured the correct collation is explicitly set for character columns (`COLLATE utf8mb4_unicode_ci`). ## New Fleet configuration settings - [ ] Setting(s) is/are explicitly excluded from GitOps If you didn't check the box above, follow this checklist for GitOps-enabled settings: - [ ] Verified that the setting is exported via `fleetctl generate-gitops` - [ ] Verified the setting is documented in a separate PR to [the GitOps documentation](https://github.com/fleetdm/fleet/blob/main/docs/Configuration/yaml-files.md#L485) - [ ] Verified that the setting is cleared on the server if it is not supplied in a YAML file (or that it is documented as being optional) - [ ] Verified that any relevant UI is disabled when GitOps mode is enabled ## fleetd/orbit/Fleet Desktop - [ ] Verified compatibility with the latest released version of Fleet (see [Must rule](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/workflows/fleetd-development-and-release-strategy.md)) - [ ] If the change applies to only one platform, confirmed that `runtime.GOOS` is used as needed to isolate changes - [ ] Verified that fleetd runs on macOS, Linux and Windows - [ ] Verified auto-update works from the released version of component to the new version (see [tools/tuf/test](../tools/tuf/test/README.md)) --- .../crowdstrike-full-disk-access.mobileconfig | 0 .../configuration-profiles/crowdstrike-notification.mobileconfig | 0 .../crowdstrike-service-management.mobileconfig | 0 .../crowdstrike-system-extension.mobileconfig | 0 .../configuration-profiles/crowdstrike-web-filter.mobileconfig | 0 .../disable-device-management-pane.mobileconfig | 0 .../hide-login-and-background-items-notifications.mobileconfig | 0 .../configuration-profiles/managed-login-items.mobileconfig | 0 .../{macOS => macos}/scripts/uninstall-santa-extension.sh | 0 ...low manual MDM unenrollment - [AllowManualMDMUnenrollment].xml | 0 ...Windows Spotlight collections - [AllowSpotlightCollection].xml | 0 ...y – [ACConnectivityInStandby_2, DCConnectivityInStandby_2].xml | 0 ...e – [ConfigureInternetConnectionSharingServiceStartupMode].xml | 0 ...ft FTP Service – [ConfigureMicrosoftFTPServiceStartupMode].xml | 0 ... – [ConfigureRemoteProcedureCallLocatorServiceStartupMode].xml | 0 ...vice – [ConfigureRoutingAndRemoteAccessServiceStartupMode].xml | 0 ...overy Service – [ConfigureSSDPDiscoveryServiceStartupMode].xml | 0 ...Host service – [ConfigureUPnPDeviceHostServiceStartupMode].xml | 0 ...e Windows Game Recording and Broadcasting – [AllowGameDVR].xml | 0 ...ConfigureWindowsMediaPlayerNetworkSharingServiceStartupMode].xml | 0 ...ervice – [ConfigureWindowsMobileHotspotServiceStartupMode].xml | 0 ...– [UnsolicitedRemoteAssistance, SolicitedRemoteAssistance].xml | 0 ...sable Windows Spotlight features – [AllowWindowsSpotlight].xml | 0 ...vice – [ConfigureWorldWideWebPublishingServiceStartupMode].xml | 0 .../configuration-profiles/disable Xbox services – [Bundle].xml | 0 ...lection for Web Threat Defense – [AutomaticDataCollection].xml | 0 ...ator account – [Accounts_EnableAdministratorAccountStatus].xml | 0 ...ilt-in Guest account – [Accounts_EnableGuestAccountStatus].xml | 0 ...I installations – [MSIAlwaysInstallWithElevatedPrivileges].xml | 0 ...I installations – [MSIAlwaysInstallWithElevatedPrivileges].xml | 0 ...ognition and personalization - [AllowInputPersonalization].xml | 0 .../disable remote assistance - [AllowRemoteAssistance].xml | 0 .../disable remote login - [AllowUsersToConnectRemotely].xml | 0 .../disable simple TCPIP services – [SimpleTcp].xml | 0 ...nable Microsoft Defender SmartScreen - [EnableSmartScreen].xml | 0 ...le Microsoft Web Threat Defense service – [ServiceEnabled].xml | 0 ...Control_DetectApplicationInstallationsAndPromptForElevation].xml | 0 ...rnings for work or school accounts – [NotifyPasswordReuse].xml | 0 ...er warnings for malicious web activity – [NotifyMalicious].xml | 0 ... user warnings for unsafe applications – [NotifyUnsafeApp].xml | 0 ...ndows Defender Firewall on all network profiles – [Bundle].xml | 0 .../enforce account lockout policy – [AccountLockoutPolicy].xml | 0 .../enforce device password and lock requirements – [Bundle].xml | 0 ...boot-start driver policy – [BootStartDriverInitialization].xml | 0 ... on sign in - [BlockUserFromShowingAccountDetailsOnSignin].xml | 0 .../install Okta attestation certificate - [Bundle].xml | 0 ...ling lock screen slide show – [PreventLockScreenSlideShow].xml | 0 ...revent users from changing date and time – [AllowDateTime].xml | 0 ... PIN for wireless display pairing – [RequirePinForPairing].xml | 0 ...onsent before UAC elevation - [ConsentPromptBehaviorAdmin].xml | 0 ...n network access - [NetworkAccess_RestrictAnonymousAccess].xml | 0 ... lock timeout (10 min max) - [MaxInactivityTimeDeviceLock].xml | 0 .../{Windows => windows}/policies/set time automatically.yml | 0 .../policies/windows-fleet-hardening.policies.yml | 0 .../hide Windows Insider settings page – [HideInsiderPage].ps1 | 0 ...ll or modification of Fleet osquery – [NoRemove, NoModify].ps1 | 0 .../set screen saver grace period – [ScreenSaverGracePeriod].ps1 | 0 .../{Windows => windows}/scripts/trigger scep enrollment.ps1 | 0 58 files changed, 0 insertions(+), 0 deletions(-) rename docs/solutions/{macOS => macos}/configuration-profiles/crowdstrike-full-disk-access.mobileconfig (100%) rename docs/solutions/{macOS => macos}/configuration-profiles/crowdstrike-notification.mobileconfig (100%) rename docs/solutions/{macOS => macos}/configuration-profiles/crowdstrike-service-management.mobileconfig (100%) rename docs/solutions/{macOS => macos}/configuration-profiles/crowdstrike-system-extension.mobileconfig (100%) rename docs/solutions/{macOS => macos}/configuration-profiles/crowdstrike-web-filter.mobileconfig (100%) rename docs/solutions/{macOS => macos}/configuration-profiles/disable-device-management-pane.mobileconfig (100%) rename docs/solutions/{macOS => macos}/configuration-profiles/hide-login-and-background-items-notifications.mobileconfig (100%) rename docs/solutions/{macOS => macos}/configuration-profiles/managed-login-items.mobileconfig (100%) rename docs/solutions/{macOS => macos}/scripts/uninstall-santa-extension.sh (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/Disallow manual MDM unenrollment - [AllowManualMDMUnenrollment].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/allow Windows Spotlight collections - [AllowSpotlightCollection].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/allow network connectivity during connected standby – [ACConnectivityInStandby_2, DCConnectivityInStandby_2].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable Internet Connection Sharing service – [ConfigureInternetConnectionSharingServiceStartupMode].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable Microsoft FTP Service – [ConfigureMicrosoftFTPServiceStartupMode].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable Remote Procedure Call Locator service – [ConfigureRemoteProcedureCallLocatorServiceStartupMode].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable Routing and Remote Access service – [ConfigureRoutingAndRemoteAccessServiceStartupMode].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable SSDP Discovery Service – [ConfigureSSDPDiscoveryServiceStartupMode].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable UPnP Device Host service – [ConfigureUPnPDeviceHostServiceStartupMode].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable Windows Game Recording and Broadcasting – [AllowGameDVR].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable Windows Media Player Network Sharing Service – [ConfigureWindowsMediaPlayerNetworkSharingServiceStartupMode].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable Windows Mobile Hotspot Service – [ConfigureWindowsMobileHotspotServiceStartupMode].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable Windows Remote Assistance – [UnsolicitedRemoteAssistance, SolicitedRemoteAssistance].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable Windows Spotlight features – [AllowWindowsSpotlight].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable World Wide Web Publishing Service – [ConfigureWorldWideWebPublishingServiceStartupMode].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable Xbox services – [Bundle].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable automatic data collection for Web Threat Defense – [AutomaticDataCollection].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable built-in Administrator account – [Accounts_EnableAdministratorAccountStatus].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable built-in Guest account – [Accounts_EnableGuestAccountStatus].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable elevated privileges for MSI installations – [MSIAlwaysInstallWithElevatedPrivileges].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable elevated privileges for user MSI installations – [MSIAlwaysInstallWithElevatedPrivileges].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable online speech recognition and personalization - [AllowInputPersonalization].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable remote assistance - [AllowRemoteAssistance].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable remote login - [AllowUsersToConnectRemotely].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/disable simple TCPIP services – [SimpleTcp].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/enable Microsoft Defender SmartScreen - [EnableSmartScreen].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/enable Microsoft Web Threat Defense service – [ServiceEnabled].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/enable UAC prompts for application installations – [UserAccountControl_DetectApplicationInstallationsAndPromptForElevation].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/enable password-reuse warnings for work or school accounts – [NotifyPasswordReuse].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/enable user warnings for malicious web activity – [NotifyMalicious].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/enable user warnings for unsafe applications – [NotifyUnsafeApp].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/enforce Windows Defender Firewall on all network profiles – [Bundle].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/enforce account lockout policy – [AccountLockoutPolicy].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/enforce device password and lock requirements – [Bundle].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/enforce secure boot-start driver policy – [BootStartDriverInitialization].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/hide account details on sign in - [BlockUserFromShowingAccountDetailsOnSignin].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/install Okta attestation certificate - [Bundle].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/prevent enabling lock screen slide show – [PreventLockScreenSlideShow].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/prevent users from changing date and time – [AllowDateTime].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/require PIN for wireless display pairing – [RequirePinForPairing].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/require admin consent before UAC elevation - [ConsentPromptBehaviorAdmin].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/restrict Everyone permissions in network access - [NetworkAccess_RestrictAnonymousAccess].xml (100%) rename docs/solutions/{Windows => windows}/configuration-profiles/set maximum device lock timeout (10 min max) - [MaxInactivityTimeDeviceLock].xml (100%) rename docs/solutions/{Windows => windows}/policies/set time automatically.yml (100%) rename docs/solutions/{Windows => windows}/policies/windows-fleet-hardening.policies.yml (100%) rename docs/solutions/{Windows => windows}/scripts/hide Windows Insider settings page – [HideInsiderPage].ps1 (100%) rename docs/solutions/{Windows => windows}/scripts/prevent uninstall or modification of Fleet osquery – [NoRemove, NoModify].ps1 (100%) rename docs/solutions/{Windows => windows}/scripts/set screen saver grace period – [ScreenSaverGracePeriod].ps1 (100%) rename docs/solutions/{Windows => windows}/scripts/trigger scep enrollment.ps1 (100%) diff --git a/docs/solutions/macOS/configuration-profiles/crowdstrike-full-disk-access.mobileconfig b/docs/solutions/macos/configuration-profiles/crowdstrike-full-disk-access.mobileconfig similarity index 100% rename from docs/solutions/macOS/configuration-profiles/crowdstrike-full-disk-access.mobileconfig rename to docs/solutions/macos/configuration-profiles/crowdstrike-full-disk-access.mobileconfig diff --git a/docs/solutions/macOS/configuration-profiles/crowdstrike-notification.mobileconfig b/docs/solutions/macos/configuration-profiles/crowdstrike-notification.mobileconfig similarity index 100% rename from docs/solutions/macOS/configuration-profiles/crowdstrike-notification.mobileconfig rename to docs/solutions/macos/configuration-profiles/crowdstrike-notification.mobileconfig diff --git a/docs/solutions/macOS/configuration-profiles/crowdstrike-service-management.mobileconfig b/docs/solutions/macos/configuration-profiles/crowdstrike-service-management.mobileconfig similarity index 100% rename from docs/solutions/macOS/configuration-profiles/crowdstrike-service-management.mobileconfig rename to docs/solutions/macos/configuration-profiles/crowdstrike-service-management.mobileconfig diff --git a/docs/solutions/macOS/configuration-profiles/crowdstrike-system-extension.mobileconfig b/docs/solutions/macos/configuration-profiles/crowdstrike-system-extension.mobileconfig similarity index 100% rename from docs/solutions/macOS/configuration-profiles/crowdstrike-system-extension.mobileconfig rename to docs/solutions/macos/configuration-profiles/crowdstrike-system-extension.mobileconfig diff --git a/docs/solutions/macOS/configuration-profiles/crowdstrike-web-filter.mobileconfig b/docs/solutions/macos/configuration-profiles/crowdstrike-web-filter.mobileconfig similarity index 100% rename from docs/solutions/macOS/configuration-profiles/crowdstrike-web-filter.mobileconfig rename to docs/solutions/macos/configuration-profiles/crowdstrike-web-filter.mobileconfig diff --git a/docs/solutions/macOS/configuration-profiles/disable-device-management-pane.mobileconfig b/docs/solutions/macos/configuration-profiles/disable-device-management-pane.mobileconfig similarity index 100% rename from docs/solutions/macOS/configuration-profiles/disable-device-management-pane.mobileconfig rename to docs/solutions/macos/configuration-profiles/disable-device-management-pane.mobileconfig diff --git a/docs/solutions/macOS/configuration-profiles/hide-login-and-background-items-notifications.mobileconfig b/docs/solutions/macos/configuration-profiles/hide-login-and-background-items-notifications.mobileconfig similarity index 100% rename from docs/solutions/macOS/configuration-profiles/hide-login-and-background-items-notifications.mobileconfig rename to docs/solutions/macos/configuration-profiles/hide-login-and-background-items-notifications.mobileconfig diff --git a/docs/solutions/macOS/configuration-profiles/managed-login-items.mobileconfig b/docs/solutions/macos/configuration-profiles/managed-login-items.mobileconfig similarity index 100% rename from docs/solutions/macOS/configuration-profiles/managed-login-items.mobileconfig rename to docs/solutions/macos/configuration-profiles/managed-login-items.mobileconfig diff --git a/docs/solutions/macOS/scripts/uninstall-santa-extension.sh b/docs/solutions/macos/scripts/uninstall-santa-extension.sh similarity index 100% rename from docs/solutions/macOS/scripts/uninstall-santa-extension.sh rename to docs/solutions/macos/scripts/uninstall-santa-extension.sh diff --git a/docs/solutions/Windows/configuration-profiles/Disallow manual MDM unenrollment - [AllowManualMDMUnenrollment].xml b/docs/solutions/windows/configuration-profiles/Disallow manual MDM unenrollment - [AllowManualMDMUnenrollment].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/Disallow manual MDM unenrollment - [AllowManualMDMUnenrollment].xml rename to docs/solutions/windows/configuration-profiles/Disallow manual MDM unenrollment - [AllowManualMDMUnenrollment].xml diff --git a/docs/solutions/Windows/configuration-profiles/allow Windows Spotlight collections - [AllowSpotlightCollection].xml b/docs/solutions/windows/configuration-profiles/allow Windows Spotlight collections - [AllowSpotlightCollection].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/allow Windows Spotlight collections - [AllowSpotlightCollection].xml rename to docs/solutions/windows/configuration-profiles/allow Windows Spotlight collections - [AllowSpotlightCollection].xml diff --git a/docs/solutions/Windows/configuration-profiles/allow network connectivity during connected standby – [ACConnectivityInStandby_2, DCConnectivityInStandby_2].xml b/docs/solutions/windows/configuration-profiles/allow network connectivity during connected standby – [ACConnectivityInStandby_2, DCConnectivityInStandby_2].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/allow network connectivity during connected standby – [ACConnectivityInStandby_2, DCConnectivityInStandby_2].xml rename to docs/solutions/windows/configuration-profiles/allow network connectivity during connected standby – [ACConnectivityInStandby_2, DCConnectivityInStandby_2].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable Internet Connection Sharing service – [ConfigureInternetConnectionSharingServiceStartupMode].xml b/docs/solutions/windows/configuration-profiles/disable Internet Connection Sharing service – [ConfigureInternetConnectionSharingServiceStartupMode].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable Internet Connection Sharing service – [ConfigureInternetConnectionSharingServiceStartupMode].xml rename to docs/solutions/windows/configuration-profiles/disable Internet Connection Sharing service – [ConfigureInternetConnectionSharingServiceStartupMode].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable Microsoft FTP Service – [ConfigureMicrosoftFTPServiceStartupMode].xml b/docs/solutions/windows/configuration-profiles/disable Microsoft FTP Service – [ConfigureMicrosoftFTPServiceStartupMode].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable Microsoft FTP Service – [ConfigureMicrosoftFTPServiceStartupMode].xml rename to docs/solutions/windows/configuration-profiles/disable Microsoft FTP Service – [ConfigureMicrosoftFTPServiceStartupMode].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable Remote Procedure Call Locator service – [ConfigureRemoteProcedureCallLocatorServiceStartupMode].xml b/docs/solutions/windows/configuration-profiles/disable Remote Procedure Call Locator service – [ConfigureRemoteProcedureCallLocatorServiceStartupMode].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable Remote Procedure Call Locator service – [ConfigureRemoteProcedureCallLocatorServiceStartupMode].xml rename to docs/solutions/windows/configuration-profiles/disable Remote Procedure Call Locator service – [ConfigureRemoteProcedureCallLocatorServiceStartupMode].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable Routing and Remote Access service – [ConfigureRoutingAndRemoteAccessServiceStartupMode].xml b/docs/solutions/windows/configuration-profiles/disable Routing and Remote Access service – [ConfigureRoutingAndRemoteAccessServiceStartupMode].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable Routing and Remote Access service – [ConfigureRoutingAndRemoteAccessServiceStartupMode].xml rename to docs/solutions/windows/configuration-profiles/disable Routing and Remote Access service – [ConfigureRoutingAndRemoteAccessServiceStartupMode].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable SSDP Discovery Service – [ConfigureSSDPDiscoveryServiceStartupMode].xml b/docs/solutions/windows/configuration-profiles/disable SSDP Discovery Service – [ConfigureSSDPDiscoveryServiceStartupMode].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable SSDP Discovery Service – [ConfigureSSDPDiscoveryServiceStartupMode].xml rename to docs/solutions/windows/configuration-profiles/disable SSDP Discovery Service – [ConfigureSSDPDiscoveryServiceStartupMode].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable UPnP Device Host service – [ConfigureUPnPDeviceHostServiceStartupMode].xml b/docs/solutions/windows/configuration-profiles/disable UPnP Device Host service – [ConfigureUPnPDeviceHostServiceStartupMode].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable UPnP Device Host service – [ConfigureUPnPDeviceHostServiceStartupMode].xml rename to docs/solutions/windows/configuration-profiles/disable UPnP Device Host service – [ConfigureUPnPDeviceHostServiceStartupMode].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable Windows Game Recording and Broadcasting – [AllowGameDVR].xml b/docs/solutions/windows/configuration-profiles/disable Windows Game Recording and Broadcasting – [AllowGameDVR].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable Windows Game Recording and Broadcasting – [AllowGameDVR].xml rename to docs/solutions/windows/configuration-profiles/disable Windows Game Recording and Broadcasting – [AllowGameDVR].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable Windows Media Player Network Sharing Service – [ConfigureWindowsMediaPlayerNetworkSharingServiceStartupMode].xml b/docs/solutions/windows/configuration-profiles/disable Windows Media Player Network Sharing Service – [ConfigureWindowsMediaPlayerNetworkSharingServiceStartupMode].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable Windows Media Player Network Sharing Service – [ConfigureWindowsMediaPlayerNetworkSharingServiceStartupMode].xml rename to docs/solutions/windows/configuration-profiles/disable Windows Media Player Network Sharing Service – [ConfigureWindowsMediaPlayerNetworkSharingServiceStartupMode].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable Windows Mobile Hotspot Service – [ConfigureWindowsMobileHotspotServiceStartupMode].xml b/docs/solutions/windows/configuration-profiles/disable Windows Mobile Hotspot Service – [ConfigureWindowsMobileHotspotServiceStartupMode].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable Windows Mobile Hotspot Service – [ConfigureWindowsMobileHotspotServiceStartupMode].xml rename to docs/solutions/windows/configuration-profiles/disable Windows Mobile Hotspot Service – [ConfigureWindowsMobileHotspotServiceStartupMode].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable Windows Remote Assistance – [UnsolicitedRemoteAssistance, SolicitedRemoteAssistance].xml b/docs/solutions/windows/configuration-profiles/disable Windows Remote Assistance – [UnsolicitedRemoteAssistance, SolicitedRemoteAssistance].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable Windows Remote Assistance – [UnsolicitedRemoteAssistance, SolicitedRemoteAssistance].xml rename to docs/solutions/windows/configuration-profiles/disable Windows Remote Assistance – [UnsolicitedRemoteAssistance, SolicitedRemoteAssistance].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable Windows Spotlight features – [AllowWindowsSpotlight].xml b/docs/solutions/windows/configuration-profiles/disable Windows Spotlight features – [AllowWindowsSpotlight].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable Windows Spotlight features – [AllowWindowsSpotlight].xml rename to docs/solutions/windows/configuration-profiles/disable Windows Spotlight features – [AllowWindowsSpotlight].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable World Wide Web Publishing Service – [ConfigureWorldWideWebPublishingServiceStartupMode].xml b/docs/solutions/windows/configuration-profiles/disable World Wide Web Publishing Service – [ConfigureWorldWideWebPublishingServiceStartupMode].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable World Wide Web Publishing Service – [ConfigureWorldWideWebPublishingServiceStartupMode].xml rename to docs/solutions/windows/configuration-profiles/disable World Wide Web Publishing Service – [ConfigureWorldWideWebPublishingServiceStartupMode].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable Xbox services – [Bundle].xml b/docs/solutions/windows/configuration-profiles/disable Xbox services – [Bundle].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable Xbox services – [Bundle].xml rename to docs/solutions/windows/configuration-profiles/disable Xbox services – [Bundle].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable automatic data collection for Web Threat Defense – [AutomaticDataCollection].xml b/docs/solutions/windows/configuration-profiles/disable automatic data collection for Web Threat Defense – [AutomaticDataCollection].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable automatic data collection for Web Threat Defense – [AutomaticDataCollection].xml rename to docs/solutions/windows/configuration-profiles/disable automatic data collection for Web Threat Defense – [AutomaticDataCollection].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable built-in Administrator account – [Accounts_EnableAdministratorAccountStatus].xml b/docs/solutions/windows/configuration-profiles/disable built-in Administrator account – [Accounts_EnableAdministratorAccountStatus].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable built-in Administrator account – [Accounts_EnableAdministratorAccountStatus].xml rename to docs/solutions/windows/configuration-profiles/disable built-in Administrator account – [Accounts_EnableAdministratorAccountStatus].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable built-in Guest account – [Accounts_EnableGuestAccountStatus].xml b/docs/solutions/windows/configuration-profiles/disable built-in Guest account – [Accounts_EnableGuestAccountStatus].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable built-in Guest account – [Accounts_EnableGuestAccountStatus].xml rename to docs/solutions/windows/configuration-profiles/disable built-in Guest account – [Accounts_EnableGuestAccountStatus].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable elevated privileges for MSI installations – [MSIAlwaysInstallWithElevatedPrivileges].xml b/docs/solutions/windows/configuration-profiles/disable elevated privileges for MSI installations – [MSIAlwaysInstallWithElevatedPrivileges].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable elevated privileges for MSI installations – [MSIAlwaysInstallWithElevatedPrivileges].xml rename to docs/solutions/windows/configuration-profiles/disable elevated privileges for MSI installations – [MSIAlwaysInstallWithElevatedPrivileges].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable elevated privileges for user MSI installations – [MSIAlwaysInstallWithElevatedPrivileges].xml b/docs/solutions/windows/configuration-profiles/disable elevated privileges for user MSI installations – [MSIAlwaysInstallWithElevatedPrivileges].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable elevated privileges for user MSI installations – [MSIAlwaysInstallWithElevatedPrivileges].xml rename to docs/solutions/windows/configuration-profiles/disable elevated privileges for user MSI installations – [MSIAlwaysInstallWithElevatedPrivileges].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable online speech recognition and personalization - [AllowInputPersonalization].xml b/docs/solutions/windows/configuration-profiles/disable online speech recognition and personalization - [AllowInputPersonalization].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable online speech recognition and personalization - [AllowInputPersonalization].xml rename to docs/solutions/windows/configuration-profiles/disable online speech recognition and personalization - [AllowInputPersonalization].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable remote assistance - [AllowRemoteAssistance].xml b/docs/solutions/windows/configuration-profiles/disable remote assistance - [AllowRemoteAssistance].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable remote assistance - [AllowRemoteAssistance].xml rename to docs/solutions/windows/configuration-profiles/disable remote assistance - [AllowRemoteAssistance].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable remote login - [AllowUsersToConnectRemotely].xml b/docs/solutions/windows/configuration-profiles/disable remote login - [AllowUsersToConnectRemotely].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable remote login - [AllowUsersToConnectRemotely].xml rename to docs/solutions/windows/configuration-profiles/disable remote login - [AllowUsersToConnectRemotely].xml diff --git a/docs/solutions/Windows/configuration-profiles/disable simple TCPIP services – [SimpleTcp].xml b/docs/solutions/windows/configuration-profiles/disable simple TCPIP services – [SimpleTcp].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/disable simple TCPIP services – [SimpleTcp].xml rename to docs/solutions/windows/configuration-profiles/disable simple TCPIP services – [SimpleTcp].xml diff --git a/docs/solutions/Windows/configuration-profiles/enable Microsoft Defender SmartScreen - [EnableSmartScreen].xml b/docs/solutions/windows/configuration-profiles/enable Microsoft Defender SmartScreen - [EnableSmartScreen].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/enable Microsoft Defender SmartScreen - [EnableSmartScreen].xml rename to docs/solutions/windows/configuration-profiles/enable Microsoft Defender SmartScreen - [EnableSmartScreen].xml diff --git a/docs/solutions/Windows/configuration-profiles/enable Microsoft Web Threat Defense service – [ServiceEnabled].xml b/docs/solutions/windows/configuration-profiles/enable Microsoft Web Threat Defense service – [ServiceEnabled].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/enable Microsoft Web Threat Defense service – [ServiceEnabled].xml rename to docs/solutions/windows/configuration-profiles/enable Microsoft Web Threat Defense service – [ServiceEnabled].xml diff --git a/docs/solutions/Windows/configuration-profiles/enable UAC prompts for application installations – [UserAccountControl_DetectApplicationInstallationsAndPromptForElevation].xml b/docs/solutions/windows/configuration-profiles/enable UAC prompts for application installations – [UserAccountControl_DetectApplicationInstallationsAndPromptForElevation].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/enable UAC prompts for application installations – [UserAccountControl_DetectApplicationInstallationsAndPromptForElevation].xml rename to docs/solutions/windows/configuration-profiles/enable UAC prompts for application installations – [UserAccountControl_DetectApplicationInstallationsAndPromptForElevation].xml diff --git a/docs/solutions/Windows/configuration-profiles/enable password-reuse warnings for work or school accounts – [NotifyPasswordReuse].xml b/docs/solutions/windows/configuration-profiles/enable password-reuse warnings for work or school accounts – [NotifyPasswordReuse].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/enable password-reuse warnings for work or school accounts – [NotifyPasswordReuse].xml rename to docs/solutions/windows/configuration-profiles/enable password-reuse warnings for work or school accounts – [NotifyPasswordReuse].xml diff --git a/docs/solutions/Windows/configuration-profiles/enable user warnings for malicious web activity – [NotifyMalicious].xml b/docs/solutions/windows/configuration-profiles/enable user warnings for malicious web activity – [NotifyMalicious].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/enable user warnings for malicious web activity – [NotifyMalicious].xml rename to docs/solutions/windows/configuration-profiles/enable user warnings for malicious web activity – [NotifyMalicious].xml diff --git a/docs/solutions/Windows/configuration-profiles/enable user warnings for unsafe applications – [NotifyUnsafeApp].xml b/docs/solutions/windows/configuration-profiles/enable user warnings for unsafe applications – [NotifyUnsafeApp].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/enable user warnings for unsafe applications – [NotifyUnsafeApp].xml rename to docs/solutions/windows/configuration-profiles/enable user warnings for unsafe applications – [NotifyUnsafeApp].xml diff --git a/docs/solutions/Windows/configuration-profiles/enforce Windows Defender Firewall on all network profiles – [Bundle].xml b/docs/solutions/windows/configuration-profiles/enforce Windows Defender Firewall on all network profiles – [Bundle].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/enforce Windows Defender Firewall on all network profiles – [Bundle].xml rename to docs/solutions/windows/configuration-profiles/enforce Windows Defender Firewall on all network profiles – [Bundle].xml diff --git a/docs/solutions/Windows/configuration-profiles/enforce account lockout policy – [AccountLockoutPolicy].xml b/docs/solutions/windows/configuration-profiles/enforce account lockout policy – [AccountLockoutPolicy].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/enforce account lockout policy – [AccountLockoutPolicy].xml rename to docs/solutions/windows/configuration-profiles/enforce account lockout policy – [AccountLockoutPolicy].xml diff --git a/docs/solutions/Windows/configuration-profiles/enforce device password and lock requirements – [Bundle].xml b/docs/solutions/windows/configuration-profiles/enforce device password and lock requirements – [Bundle].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/enforce device password and lock requirements – [Bundle].xml rename to docs/solutions/windows/configuration-profiles/enforce device password and lock requirements – [Bundle].xml diff --git a/docs/solutions/Windows/configuration-profiles/enforce secure boot-start driver policy – [BootStartDriverInitialization].xml b/docs/solutions/windows/configuration-profiles/enforce secure boot-start driver policy – [BootStartDriverInitialization].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/enforce secure boot-start driver policy – [BootStartDriverInitialization].xml rename to docs/solutions/windows/configuration-profiles/enforce secure boot-start driver policy – [BootStartDriverInitialization].xml diff --git a/docs/solutions/Windows/configuration-profiles/hide account details on sign in - [BlockUserFromShowingAccountDetailsOnSignin].xml b/docs/solutions/windows/configuration-profiles/hide account details on sign in - [BlockUserFromShowingAccountDetailsOnSignin].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/hide account details on sign in - [BlockUserFromShowingAccountDetailsOnSignin].xml rename to docs/solutions/windows/configuration-profiles/hide account details on sign in - [BlockUserFromShowingAccountDetailsOnSignin].xml diff --git a/docs/solutions/Windows/configuration-profiles/install Okta attestation certificate - [Bundle].xml b/docs/solutions/windows/configuration-profiles/install Okta attestation certificate - [Bundle].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/install Okta attestation certificate - [Bundle].xml rename to docs/solutions/windows/configuration-profiles/install Okta attestation certificate - [Bundle].xml diff --git a/docs/solutions/Windows/configuration-profiles/prevent enabling lock screen slide show – [PreventLockScreenSlideShow].xml b/docs/solutions/windows/configuration-profiles/prevent enabling lock screen slide show – [PreventLockScreenSlideShow].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/prevent enabling lock screen slide show – [PreventLockScreenSlideShow].xml rename to docs/solutions/windows/configuration-profiles/prevent enabling lock screen slide show – [PreventLockScreenSlideShow].xml diff --git a/docs/solutions/Windows/configuration-profiles/prevent users from changing date and time – [AllowDateTime].xml b/docs/solutions/windows/configuration-profiles/prevent users from changing date and time – [AllowDateTime].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/prevent users from changing date and time – [AllowDateTime].xml rename to docs/solutions/windows/configuration-profiles/prevent users from changing date and time – [AllowDateTime].xml diff --git a/docs/solutions/Windows/configuration-profiles/require PIN for wireless display pairing – [RequirePinForPairing].xml b/docs/solutions/windows/configuration-profiles/require PIN for wireless display pairing – [RequirePinForPairing].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/require PIN for wireless display pairing – [RequirePinForPairing].xml rename to docs/solutions/windows/configuration-profiles/require PIN for wireless display pairing – [RequirePinForPairing].xml diff --git a/docs/solutions/Windows/configuration-profiles/require admin consent before UAC elevation - [ConsentPromptBehaviorAdmin].xml b/docs/solutions/windows/configuration-profiles/require admin consent before UAC elevation - [ConsentPromptBehaviorAdmin].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/require admin consent before UAC elevation - [ConsentPromptBehaviorAdmin].xml rename to docs/solutions/windows/configuration-profiles/require admin consent before UAC elevation - [ConsentPromptBehaviorAdmin].xml diff --git a/docs/solutions/Windows/configuration-profiles/restrict Everyone permissions in network access - [NetworkAccess_RestrictAnonymousAccess].xml b/docs/solutions/windows/configuration-profiles/restrict Everyone permissions in network access - [NetworkAccess_RestrictAnonymousAccess].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/restrict Everyone permissions in network access - [NetworkAccess_RestrictAnonymousAccess].xml rename to docs/solutions/windows/configuration-profiles/restrict Everyone permissions in network access - [NetworkAccess_RestrictAnonymousAccess].xml diff --git a/docs/solutions/Windows/configuration-profiles/set maximum device lock timeout (10 min max) - [MaxInactivityTimeDeviceLock].xml b/docs/solutions/windows/configuration-profiles/set maximum device lock timeout (10 min max) - [MaxInactivityTimeDeviceLock].xml similarity index 100% rename from docs/solutions/Windows/configuration-profiles/set maximum device lock timeout (10 min max) - [MaxInactivityTimeDeviceLock].xml rename to docs/solutions/windows/configuration-profiles/set maximum device lock timeout (10 min max) - [MaxInactivityTimeDeviceLock].xml diff --git a/docs/solutions/Windows/policies/set time automatically.yml b/docs/solutions/windows/policies/set time automatically.yml similarity index 100% rename from docs/solutions/Windows/policies/set time automatically.yml rename to docs/solutions/windows/policies/set time automatically.yml diff --git a/docs/solutions/Windows/policies/windows-fleet-hardening.policies.yml b/docs/solutions/windows/policies/windows-fleet-hardening.policies.yml similarity index 100% rename from docs/solutions/Windows/policies/windows-fleet-hardening.policies.yml rename to docs/solutions/windows/policies/windows-fleet-hardening.policies.yml diff --git a/docs/solutions/Windows/scripts/hide Windows Insider settings page – [HideInsiderPage].ps1 b/docs/solutions/windows/scripts/hide Windows Insider settings page – [HideInsiderPage].ps1 similarity index 100% rename from docs/solutions/Windows/scripts/hide Windows Insider settings page – [HideInsiderPage].ps1 rename to docs/solutions/windows/scripts/hide Windows Insider settings page – [HideInsiderPage].ps1 diff --git a/docs/solutions/Windows/scripts/prevent uninstall or modification of Fleet osquery – [NoRemove, NoModify].ps1 b/docs/solutions/windows/scripts/prevent uninstall or modification of Fleet osquery – [NoRemove, NoModify].ps1 similarity index 100% rename from docs/solutions/Windows/scripts/prevent uninstall or modification of Fleet osquery – [NoRemove, NoModify].ps1 rename to docs/solutions/windows/scripts/prevent uninstall or modification of Fleet osquery – [NoRemove, NoModify].ps1 diff --git a/docs/solutions/Windows/scripts/set screen saver grace period – [ScreenSaverGracePeriod].ps1 b/docs/solutions/windows/scripts/set screen saver grace period – [ScreenSaverGracePeriod].ps1 similarity index 100% rename from docs/solutions/Windows/scripts/set screen saver grace period – [ScreenSaverGracePeriod].ps1 rename to docs/solutions/windows/scripts/set screen saver grace period – [ScreenSaverGracePeriod].ps1 diff --git a/docs/solutions/Windows/scripts/trigger scep enrollment.ps1 b/docs/solutions/windows/scripts/trigger scep enrollment.ps1 similarity index 100% rename from docs/solutions/Windows/scripts/trigger scep enrollment.ps1 rename to docs/solutions/windows/scripts/trigger scep enrollment.ps1