Forum Discussion
JimmyWork
Jun 10, 2023Iron Contributor
Enforcing blank value in Settings Catalog, Local Security policies User Rights
When trying to enforce a blank value using settings catalog to set UserRights it will throw error in Event Viewer. Example: Settings Catalog - User Rights - Lock Memory. When trying to use any o...
JimmyWork
Jun 12, 2023Iron Contributor
Chatgpt answer?
This is according to MS documentation.
No matter how you provide the values you will get an error, settings catalor or oma-uri according to csp.
This is now reported as a bug on github
This is according to MS documentation.
No matter how you provide the values you will get an error, settings catalor or oma-uri according to csp.
This is now reported as a bug on github
GerardoHernandez
Jun 14, 2023Brass Contributor
Hi JimmyWork
Was just facing the same issue and I tested the CIS value:
No one <Blank>
And also the Value from doing Group Policy Analytics
[]
Both of them were written in the registry and even if you edit (which is possible in local policies with Intune (don't know why)) after another sync or some time I guess the values went back to blank. Still waiting on other policy where I added another account to see if it leaves the policy value.
Im trying to create MS baseline with Intune and just what is missing in Intune add it in a small GPO. Hope it works.
- JimmyWorkJun 15, 2023Iron ContributorThe main problem is that event viewer will throw errors, even if you follow Microsoft Documentation on how to set blank values.
I can set the values and make them stay, But I will recive errors in Event viewer or in Intune, I cannot achive both sides error free.- GerardoHernandezJun 15, 2023Brass ContributorOh well...that is Microsoft issue. At least the policy works. My problem is it takes too long (don't know exactly how long) to overwrite changes done by a creative user (to say so). as it now allow changes. That is the main concern for me.