Deze beveiligingsinstelling controleert user profile service profsvс is set to automatische configuratie op Windows endpoints.
Aanbeveling
IMPLEMENT
Risico zonder
High
Risk Score
7/10
Implementatie
2u (tech: 1u)
Van toepassing op:
✓ Windows
Zonder correcte user profile service profsvс is set to automatische configuratie kunnen beveiligingsrisico's ontstaan die leiden tot ongeautoriseerde toegang of data compromise.
Dit regelen configureert user profile service profsvс is set to automatische via Microsoft Intune apparaat configuratie beleid of compliance policies om Windows endpoints te beveiligen volgens security best practices.
Vereisten
Microsoft Intune via device configuratiebeleidsregels
Implementatie
Gebruik PowerShell-script user-profile-service-profsvс-is-set-to-automatic.ps1 (functie Invoke-Implementation) – Implementeren.
Gebruik PowerShell-script user-profile-service-profsvс-is-set-to-automatic.ps1 (functie Invoke-Monitoring) – Monitoren.
monitoring
Gebruik PowerShell-script user-profile-service-profsvс-is-set-to-automatic.ps1 (functie Invoke-Monitoring) – Controleren.
Remediatie
Gebruik PowerShell-script user-profile-service-profsvс-is-set-to-automatic.ps1 (functie Invoke-Remediation) – Herstellen.
Compliance en Auditing
Beleid documentatie
Compliance & Frameworks
CIS M365: Control 18.9.19.2 (L1) - CIS Security Benchmark aanbevelingen
BIO: 16.01 - BIO Baseline Informatiebeveiliging Overheid - 16.01 - Gebeurtenissen logging en audittrails
ISO 27001:2022: A.12.4.1 - ISO 27001:2022 - Gebeurtenissen logging en audittrails
Automation
Gebruik het onderstaande PowerShell script om deze security control te monitoren en te implementeren. Het script bevat functies voor zowel monitoring (-Monitoring) als remediation (-Remediation).
PowerShell
<#
================================================================================
POWERSHELL SCRIPT - Nederlandse Baseline voor Veilige Cloud
================================================================================
.SYNOPSIS
User Profile Service Profsvс Is Set To Automatic
.DESCRIPTION
Implementeert, monitort en herstelt: User Profile Service Profsvс Is Set To Automatic
.NOTES
Filename: user-profile-service-profsvс-is-set-to-automatic.ps1
Author: Nederlandse Baseline voor Veilige Cloud
Version: 1.0
Workload: intune
Category: security-options
#>
#Requires -Version 5.1
[CmdletBinding()]
param()
$ErrorActionPreference = 'Stop'
function Invoke-Implementation {
<#
.SYNOPSIS
Implementeert de configuratie
#>
[CmdletBinding()]
param()
Write-Host "[INFO] Invoke-Implementation - User Profile Service Profsvс Is Set To Automatic" -ForegroundColor Cyan
Invoke-Remediation
}
function Invoke-Monitoring {
<#
.SYNOPSIS
Controleert de huidige configuratie status
#>
[CmdletBinding()]
param()
try {
Write-Host "
========================================" -ForegroundColor Cyan
Write-Host "User Profile Service Profsvс Is Set To Automatic - Monitoring" -ForegroundColor Cyan
Write-Host "========================================" -ForegroundColor Cyan
# TODO: Implementeer monitoring logica voor User Profile Service Profsvс Is Set To Automatic
Write-Host "[INFO] Monitoring check voor User Profile Service Profsvс Is Set To Automatic" -ForegroundColor Yellow
Write-Host "[OK] Monitoring check completed" -ForegroundColor Green
}
catch {
Write-Error "Monitoring failed: $_"
throw
}
}
function Invoke-Remediation {
<#
.SYNOPSIS
Herstelt de configuratie naar de gewenste staat
#>
[CmdletBinding()]
param()
try {
Write-Host "
========================================" -ForegroundColor Cyan
Write-Host "User Profile Service Profsvс Is Set To Automatic - Remediation" -ForegroundColor Cyan
Write-Host "========================================" -ForegroundColor Cyan
# TODO: Implementeer remediation logica voor User Profile Service Profsvс Is Set To Automatic
Write-Host "[INFO] Remediation voor User Profile Service Profsvс Is Set To Automatic" -ForegroundColor Yellow
Write-Host "[OK] Remediation completed" -ForegroundColor Green
}
catch {
Write-Error "Remediation failed: $_"
throw
}
}