Mason Buettner
b3fa01a144
Add disable-insider-ui-page.ps1 ( #34499 )
...
This script disables the UI page where users can opt into the Windows
insider program.
# Checklist for submitter
If some of the following don't apply, delete the relevant line.
## Testing
- [x] QA'd all new/changed functionality manually
---------
Co-authored-by: Dale Ribeiro <dale@fleetdm.com>
2025-10-22 13:57:12 -04:00
Graham Williams
4dc76ec838
Create windows-device-privacy-speechrecognition-disabled.xml ( #34505 )
...
- Uses randomly generated UUID for the CmdID as required by [CmdID
Specs](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-mdm/d7321df8-ecb2-4c81-8a24-54630bc7456f )
- Created **Device** profile to disable the setting as required based on
[Microsoft
Docs](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-system#bootstartdriverinitialization )
- Profiles return as **Verified** in FleetUI
- Event Viewer shows no errors
- Ability to enable service disabled
<img width="1025" height="406" alt="image"
src="https://github.com/user-attachments/assets/13efdd05-7248-4dc5-b41f-0d550b3c3f0e "
/>
---------
Co-authored-by: Dale Ribeiro <dale@fleetdm.com>
2025-10-22 13:02:55 -04:00
Brock Walters
d4dabf4783
Add configuration to block user account details on sign-in ( #34622 )
2025-10-22 12:59:12 -04:00
Harrison Ravazzolo
bb4717da1f
Enable SmartScreen, Prompt for user elevation CSP ( #34445 )
2025-10-22 12:51:25 -04:00
Graham Williams
27bbebc122
Create windows-device-systemservices-simptcp-disabled.xml ( #34502 )
...
- Uses randomly generated UUID for the CmdID as required by [CmdID
Specs](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-mdm/d7321df8-ecb2-4c81-8a24-54630bc7456f )
- Created **Device** profile to disable the setting as required based on
[Microsoft
Docs](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-system#bootstartdriverinitialization )
- Profiles return as **Verified** in FleetUI (Requires device restart)
- Event Viewer shows no errors
- Service shows as disabled
2025-10-22 10:09:59 +01:00
Graham Williams
e08b34c8e2
Create windows-device-remoteassistance-disabled.xml ( #34503 )
...
- Uses randomly generated UUID for the CmdID as required by [CmdID
Specs](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-mdm/d7321df8-ecb2-4c81-8a24-54630bc7456f )
- Created **Device** profile to disable the setting as required based on
[Microsoft
Docs](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-system#bootstartdriverinitialization )
- Profiles return as **Verified** in FleetUI (Requires device restart)
- Event Viewer shows no errors
- Requesting Remote Assist fails
<img width="1461" height="1034" alt="image"
src="https://github.com/user-attachments/assets/3eb29616-0dbc-495a-bf35-51b60d49bd11 "
/>
Co-authored-by: Dale Ribeiro <dale@fleetdm.com>
2025-10-22 10:09:36 +01:00
Graham Williams
3144b1eacc
Create windows-device-networkaccess-everyonepermissions.xml ( #34508 )
...
- Uses randomly generated UUID for the CmdID as required by [CmdID
Specs](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-mdm/d7321df8-ecb2-4c81-8a24-54630bc7456f )
- Created **Device** profile to disable the setting as required based on
[Microsoft
Docs](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions#networkaccess_leteveryonepermissionsapplytoanonymoususers )
- Profiles return as **Verified** in FleetUI
- Event Viewer shows no errors
<img width="1468" height="296" alt="image"
src="https://github.com/user-attachments/assets/cfd23f13-c47a-4aa7-a7b3-604ec7421a15 "
/>
Co-authored-by: Dale Ribeiro <dale@fleetdm.com>
2025-10-22 10:09:21 +01:00
Harrison Ravazzolo
fdc184fe58
Windows CSP - Spotlight config + Okta scep ( #34589 )
2025-10-21 08:47:50 -07:00
Brock Walters
92a58851fa
Added new Set_ScreenSaverGracePeriod.ps1 script ( #34340 )
...
This script is part of the CSA project to create Windows controls for
customer-rembrandt.
2025-10-16 11:08:36 -05:00
Graham Williams
2f6cacb09d
Create Profile: Disable Local Administrator ( #34344 )
...
- Administrator account starts as enabled: True
- Profile verifies: True
- Administrator account disabled after apply: True
<img width="1654" height="1113" alt="image"
src="https://github.com/user-attachments/assets/9551d87a-341a-49e3-8d0b-15c86ea1b81c "
/>
<img width="2043" height="424" alt="image"
src="https://github.com/user-attachments/assets/acbfa66d-2684-43b8-a964-f7679fd861e8 "
/>
2025-10-16 11:08:04 -05:00
