Forum Discussion
Baselines in SCAP/Nessus audit format
FLeven - IIRC the last time I looked into it (a couple of years ago), DSC could not reliably handle Advanced Auditing settings nor most Security Options (esp. the items persisted in inaccessible areas of the registry and/or in undocumented formats).
Implementations I've seen in the past had bugs and/or took dependencies on US-English.
That said, that might have been addressed in the interim.
I know, take a look at the policy analyzer, regarding US-dependent.
What would be the official way to do automated reporting on "security" compliance based on GPO's to ensure an environment stays perfectly as it was designed, to not loose any kind of certification I went through ?
I went for a time with pester tests (16K items plus incl. baselines + custom), DSC at least would combine configuration/reporting and offer a SQL-Database to work with.