Forum Discussion
Deleted
Deleted I've got the same problem on German Windows versions. Luckily, I managed to grab the offending file from the %tmp% directory. The problem is the unescaped ampersand (&) in the following line:
<AuditSubcategory><GUID>{0CCE9248-69AE-11D9-BED3-505054503030}</GUID><Name>Plug & Play-Ereignisse</Name><Setting>0</Setting><SourceFile>C:\Users\Administrator.DOMAIN\AppData\Local\Temp\tmp16F8.tmp</SourceFile><PolicyName>SERVER - auditpol /backup</PolicyName></AuditSubcategory>This is the "Audit PNP Activity" policy, or "PNP-Überwachungsaktivität" in German.
However, I don't have any idea for a workaround yet. The %tmp% file seems to be created with a random name and exists only for the fraction of a second. And the localized string does not come from the .adml files.
- FLevenMay 20, 2022Copper Contributor
Deleted Good find, search for hardeningkitty and forget about the clunky old Policy analyzer.
- AaronMargosis_TaniumMay 20, 2022Iron Contributor
FLeven - FWIW, I looked up hardeningkitty and it is more dependent on US-English than Policy Analyzer is.
Also FWIW, I'd really like to see these bugs fixed as well.
- FLevenMay 21, 2022Copper ContributorIt is clearly documented in the Code, you just have to change the Account Default named in the Switch from Line 464 to 490 in the invoke-hardeningkitty.ps1. we can PR this for De-de If necessary.