Public/TenantConfiguration/Baseline/SecurityBaselines/JyskIT-Baseline-SEC-SecurityBaseline.json
|
{
"displayName": "JyskIT-Baseline-SEC-SecurityBaseline", "description": "This configures many security settings for Windows 10+ devices, to the Jysk IT security baseline. Can contain breaking changes, and should be tested before deployment. Also used to specify minimum password/PIN requirements.", "settingsDelta": [ { "id": "ed70ea1b-7f30-4a78-995e-8b4282d5d11b", "definitionId": "deviceConfiguration--windows10EndpointProtectionConfiguration_bitLockerRemovableDrivePolicy", "@odata.type": "#microsoft.graph.deviceManagementComplexSettingInstance", "valueJson": "{\"requireEncryptionForWriteAccess\":false}" }, { "id": "07913c8f-8709-4fbc-b2d3-d0b742bee4ce", "definitionId": "deviceConfiguration--windows10GeneralConfiguration_edgePreventCertificateErrorOverride", "@odata.type": "#microsoft.graph.deviceManagementBooleanSettingInstance", "value": false }, { "id": "ae87d41e-0052-4583-9a7e-58dd884feda3", "definitionId": "deviceConfiguration--windows10GeneralConfiguration_passwordRequiredType", "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance", "value": "deviceDefault" }, { "id": "ad6c51b8-9df0-40e5-b03f-28558c6e833f", "definitionId": "deviceConfiguration--windows10GeneralConfiguration_passwordExpirationDays", "@odata.type": "#microsoft.graph.deviceManagementIntegerSettingInstance", "value": 0 }, { "id": "4213deab-7538-42d0-9c20-01a40a2a61d4", "definitionId": "deviceConfiguration--windows10GeneralConfiguration_passwordMinimumCharacterSetCount", "@odata.type": "#microsoft.graph.deviceManagementIntegerSettingInstance", "value": 1 }, { "id": "c2cfcd8e-fbf1-42ca-b9ed-7eea3a3d56e6", "definitionId": "deviceConfiguration--windows10GeneralConfiguration_passwordMinimumLength", "@odata.type": "#microsoft.graph.deviceManagementIntegerSettingInstance", "value": 4 }, { "id": "f2f8b6f7-6f4e-4d00-9f46-09275e61d53e", "definitionId": "deviceConfiguration--windows10GeneralConfiguration_passwordSignInFailureCountBeforeFactoryReset", "@odata.type": "#microsoft.graph.deviceManagementIntegerSettingInstance", "value": 0 }, { "id": "8e1666c4-a001-4028-b518-bd6c5ce244bd", "definitionId": "deviceConfiguration--windows10GeneralConfiguration_passwordMinimumAgeInDays", "@odata.type": "#microsoft.graph.deviceManagementIntegerSettingInstance", "value": 0 }, { "id": "3d749e23-211e-4cf6-aedb-1b34585bf8f0", "definitionId": "deviceConfiguration--windows10EndpointProtectionConfiguration_localSecurityOptionsMachineInactivityLimit", "@odata.type": "#microsoft.graph.deviceManagementIntegerSettingInstance", "value": null }, { "id": "bb141aeb-396c-4ea9-a6a1-d2b56bec79d7", "definitionId": "deviceConfiguration--windows10EndpointProtectionConfiguration_defenderAdobeReaderLaunchChildProcess", "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance", "value": "notConfigured" }, { "id": "c15dad49-783c-4e76-8782-d0cd764973c1", "definitionId": "deviceConfiguration--windows10EndpointProtectionConfiguration_defenderOfficeCommunicationAppsLaunchChildProcess", "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance", "value": "notConfigured" }, { "id": "15d664b2-b80f-47ee-89d3-d53111c51bfe", "definitionId": "deviceConfiguration--windows10GeneralConfiguration_defenderSignatureUpdateIntervalInHours", "@odata.type": "#microsoft.graph.deviceManagementIntegerSettingInstance", "value": null }, { "id": "71bc4849-3bc3-4c05-9e95-55a4fe7230e3", "definitionId": "deviceConfiguration--windows10GeneralConfiguration_defenderScheduleScanDay", "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance", "value": "noScheduledScan" }, { "id": "bd2dc399-054d-4163-b89b-8e09c3471f46", "definitionId": "deviceConfiguration--windows10GeneralConfiguration_defenderScanNetworkFiles", "@odata.type": "#microsoft.graph.deviceManagementBooleanSettingInstance", "value": false }, { "id": "90b69c72-6cd6-4843-bc68-8ccee5600c8f", "definitionId": "deviceConfiguration--windows10GeneralConfiguration_defenderRequireRealTimeMonitoring", "@odata.type": "#microsoft.graph.deviceManagementBooleanSettingInstance", "value": false }, { "id": "7452505c-992d-4106-8e70-9f6ca96854ae", "definitionId": "deviceConfiguration--windows10EndpointProtectionConfiguration_defenderAllowScanScriptsLoadedInInternetExplorer", "@odata.type": "#microsoft.graph.deviceManagementBooleanSettingInstance", "value": null }, { "id": "f2677aba-9dab-4d73-a7b8-cc1c5e477cf7", "definitionId": "deviceConfiguration--windows10GeneralConfiguration_defenderScanArchiveFiles", "@odata.type": "#microsoft.graph.deviceManagementBooleanSettingInstance", "value": false }, { "id": "6a736eb0-209e-4040-8d34-1672a03f1f28", "definitionId": "deviceConfiguration--windows10GeneralConfiguration_defenderRequireBehaviorMonitoring", "@odata.type": "#microsoft.graph.deviceManagementBooleanSettingInstance", "value": false }, { "id": "f6a3559f-ef8b-4f90-98d5-751fa02075cc", "definitionId": "deviceConfiguration--windows10GeneralConfiguration_defenderScanIncomingMail", "@odata.type": "#microsoft.graph.deviceManagementBooleanSettingInstance", "value": false }, { "id": "14094890-920d-4d29-bd0c-c27dcd38bc7b", "definitionId": "deviceConfiguration--windows10GeneralConfiguration_defenderRequireCloudProtection", "@odata.type": "#microsoft.graph.deviceManagementBooleanSettingInstance", "value": false }, { "id": "2ceeed8a-637d-423f-8df0-edef87fdd54d", "definitionId": "deviceConfiguration--windows10GeneralConfiguration_defenderScanRemovableDrivesDuringFullScan", "@odata.type": "#microsoft.graph.deviceManagementBooleanSettingInstance", "value": false }, { "id": "9458f969-3183-446d-920c-703ff9f1ec06", "definitionId": "deviceConfiguration--windows10EndpointProtectionConfiguration_defenderOfficeAppsOtherProcessInjectionType", "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance", "value": "userDefined" }, { "id": "3562d04c-e3bf-4d34-98a4-24cfb8707158", "definitionId": "deviceConfiguration--windows10EndpointProtectionConfiguration_defenderOfficeAppsExecutableContentCreationOrLaunchType", "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance", "value": "userDefined" }, { "id": "7be26786-6575-453e-95a7-084cee25cfd9", "definitionId": "deviceConfiguration--windows10EndpointProtectionConfiguration_defenderOfficeAppsLaunchChildProcessType", "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance", "value": "userDefined" }, { "id": "7a2f5562-3370-4317-8c41-4a85ccb13fc0", "definitionId": "deviceConfiguration--windows10EndpointProtectionConfiguration_defenderOfficeMacroCodeAllowWin32ImportsType", "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance", "value": "userDefined" }, { "id": "cbf97443-aaff-470f-b772-16d3e025e1ab", "definitionId": "deviceConfiguration--windows10EndpointProtectionConfiguration_defenderScriptObfuscatedMacroCodeType", "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance", "value": "userDefined" }, { "id": "86accc0a-b8ba-4cf9-9c97-5b6695793fbd", "definitionId": "deviceConfiguration--windows10EndpointProtectionConfiguration_defenderScriptDownloadedPayloadExecutionType", "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance", "value": "userDefined" }, { "id": "48e4b218-03ad-455f-a74b-0b81cac0cd42", "definitionId": "deviceConfiguration--windows10EndpointProtectionConfiguration_defenderEmailContentExecutionType", "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance", "value": "userDefined" }, { "id": "13b2bafd-f685-41d5-99b9-d65ac26c46b8", "definitionId": "deviceConfiguration--windows10EndpointProtectionConfiguration_defenderPreventCredentialStealingType", "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance", "value": "notConfigured" }, { "id": "ad96c74b-3468-4a4e-a0fa-1b5db484c7eb", "definitionId": "deviceConfiguration--windows10GeneralConfiguration_defenderPotentiallyUnwantedAppAction", "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance", "value": "deviceDefault" }, { "id": "128ded91-1dd8-4cdd-890f-b2f2938e040b", "definitionId": "deviceConfiguration--windows10EndpointProtectionConfiguration_defenderUntrustedUSBProcessType", "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance", "value": "userDefined" }, { "id": "91c666f2-6cdb-4041-ba5b-55f19ba9dc41", "definitionId": "deviceConfiguration--windows10EndpointProtectionConfiguration_defenderNetworkProtectionType", "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance", "value": "notConfigured" } ], "roleScopeTagIds": [ "0" ] } |