Dit regelen configureert offline files service cscservice is set to automatische via Microsoft Intune apparaat configuratie beleid of compliance policies om Windows endpoints te beveiligen volgens security best practices.
Vereisten
Microsoft Intune via device configuratiebeleidsregels
Implementatie
Gebruik PowerShell-script offline-files-service-cscservice-is-set-to-automatic.ps1 (functie Invoke-Implementation) – Implementeren.
Gebruik PowerShell-script offline-files-service-cscservice-is-set-to-automatic.ps1 (functie Invoke-Monitoring) – Monitoren.
monitoring
Gebruik PowerShell-script offline-files-service-cscservice-is-set-to-automatic.ps1 (functie Invoke-Monitoring) – Controleren.
Remediatie
Gebruik PowerShell-script offline-files-service-cscservice-is-set-to-automatic.ps1 (functie Invoke-Remediation) – Herstellen.
Compliance en Auditing
Beleid documentatie
Compliance & Frameworks
CIS M365: Control 18.9.19.2 (L1) - CIS Security Benchmark aanbevelingen
BIO: 16.01 - BIO Baseline Informatiebeveiliging Overheid - 16.01 - Gebeurtenissen logging en audittrails
ISO 27001:2022: A.12.4.1 - ISO 27001:2022 - Gebeurtenissen logging en audittrails
Automation
Gebruik het onderstaande PowerShell script om deze security control te monitoren en te implementeren. Het script bevat functies voor zowel monitoring (-Monitoring) als remediation (-Remediation).
PowerShell
<#
================================================================================
POWERSHELL SCRIPT - Nederlandse Baseline voor Veilige Cloud
================================================================================
.SYNOPSIS
Offline Files Service Cscservice Is Set To Automatic
.DESCRIPTION
Implementeert, monitort en herstelt: Offline Files Service Cscservice Is Set To Automatic
.NOTES
Filename: offline-files-service-cscservice-is-set-to-automatic.ps1
Author: Nederlandse Baseline voor Veilige Cloud
Version: 1.0
Workload: intune
Category: security-options
#>
#Requires -Version 5.1
[CmdletBinding()]
param()
$ErrorActionPreference = 'Stop'
function Invoke-Implementation {
<#
.SYNOPSIS
Implementeert de configuratie
#>
[CmdletBinding()]
param()
Write-Host "[INFO] Invoke-Implementation - Offline Files Service Cscservice Is Set To Automatic" -ForegroundColor Cyan
Invoke-Remediation
}
function Invoke-Monitoring {
<#
.SYNOPSIS
Controleert de huidige configuratie status
#>
[CmdletBinding()]
param()
try {
Write-Host "
========================================" -ForegroundColor Cyan
Write-Host "Offline Files Service Cscservice Is Set To Automatic - Monitoring" -ForegroundColor Cyan
Write-Host "========================================" -ForegroundColor Cyan
# TODO: Implementeer monitoring logica voor Offline Files Service Cscservice Is Set To Automatic
Write-Host "[INFO] Monitoring check voor Offline Files Service Cscservice Is Set To Automatic" -ForegroundColor Yellow
Write-Host "[OK] Monitoring check completed" -ForegroundColor Green
}
catch {
Write-Error "Monitoring failed: $_"
throw
}
}
function Invoke-Remediation {
<#
.SYNOPSIS
Herstelt de configuratie naar de gewenste staat
#>
[CmdletBinding()]
param()
try {
Write-Host "
========================================" -ForegroundColor Cyan
Write-Host "Offline Files Service Cscservice Is Set To Automatic - Remediation" -ForegroundColor Cyan
Write-Host "========================================" -ForegroundColor Cyan
# TODO: Implementeer remediation logica voor Offline Files Service Cscservice Is Set To Automatic
Write-Host "[INFO] Remediation voor Offline Files Service Cscservice Is Set To Automatic" -ForegroundColor Yellow
Write-Host "[OK] Remediation completed" -ForegroundColor Green
}
catch {
Write-Error "Remediation failed: $_"
throw
}
}