Microsoft
MicrosoftHello Chris! Thank you for this helpful information! Once the STIG settings are configured in InTune per the methods you describe, how can these settings be regularly verified to meet RMF Continuous Monitoring requirements? Our usual go-to tools to evaluate STIG compliance would be SCC and Evaluate-STIG (and manual STIG verification as needed). Do any DoD approved tools exist to verify InTune managed settings? Also, I assume the best case would be for DISA to produce InTune specific STIG's. Any idea if MS and DISA are working on this? Thank you!
MicrosoftHello,
Unfortunately, there has been no update to the current tools to look in the new registry locations that are leveraged by Intune and the CSP's it manages. DISA does provide a excel spreadsheet indicating what settings will show as a false positive in the current tools and the location in the registry to validate the setting was applied. I am not tracking any timelines for updated tool sets to get around this but hopefully it is on someone's roadmap.
