Policies missing in SCM Windows 8.1 Security Compliance Baseline v1.0

Hello,
I have installed SCM 3.0.60 (downloaded from this link:
Microsoft Security Compliance Manager) on a Windows 8.1 Virtual Machine. Because I could not connect my VM to internet at the moment, I imported the Windows 8.1 Security Compliance Baseline (downloaded from this link
SCM Baselines for Windows 8.1, IE 11 and Server 2012 R2 are now live!) and the baseline attachment in SCM. The import process ran well and I then created a custom baseline based on the Win8.1 Computer Security Compliance 1.0 baseline (using the Duplicate
action in SCM). During my customization I have noticed that some policies were missing from my custom baseline. After verifying the original baseline I have noticed that the policies were missing in it also. I connected my VM to the internet and clicked on
the Download Microsoft baselines automatically action in SCM. SCM downloaded additional baselines (Office 2013, SQL Server 2012,...). I was expecting the Win8.1 baseline to be updated but it was not. The policies are still missing and I cannot complete my
customization. For information the missing policies that I've noticed are the following:
Under Computer Configuration\Administrative Templates\Windows Components\File Explorer
 All policies are missing except "Configure Windows SmartScreen" and "Turn off Data Execution Prevention for Explorer"
Under Computer Configuration\Administrative Templates\Windows Components\Sync
your settings theses polices are missing:
 --> Do not sync
 --> Do not sync app settings
 --> Do not sync browser settings
 --> Do not sync desktop personalization
 --> Do not sync on metered connections
 --> Do not sync other Windows Settings
 --> Do not sync passwords
 --> Do not sync personalize
Under Computer Configuration\Administrative Templates\System\KDC these policies are missing
 --> KDC support for claims, compound authentication and Kerberos armoring
 --> User forest search order
 --> Warning for large Kerberos tickets
 --> Provide information about previous logons to client computer
It seems that theses policies are not present in the Package.XML file that is included in the Windows-8.1-Security-Compliance-Baseline.cab.
Does anyone ever experience the same issue?
Anyone know if there is an updated version of the Windows 8.1 Security Compliance Baseline ? (the version downloaded from the link i supplied above is v1.0)
Regards,
François

Hi,
in this blog, it is just related to Internet Explorer, not the lock screen camera, it can be found at the GPO.
Regards
Wade Liu
TechNet Community Support

Similar Messages

  • Your system is missing a critical Windows security patch (MS12-020) required to gain access to this system

    Hi,
    I am trying to install VPN Client from my client site. While installing i am facing the below error.
    Your system is missing a critical Windows security patch (MS12-020) required to gain access to this system. Use the link below for more information on installation, or open Windows Update and install all available critical updates. When you're finished updating
    your system, log out and try again. If you're still having problems, contact your system administrator.
    http://support.microsoft.com/kb/2621440
    I went through all the related sites but still i did not find any solution. Under Windows installed updates i could see the security update for Microsoft windows (KB2621440). If its already exist why it is not taking this security patch? 
    Kindly guide.
    Best Regards,
    Yadav Kankanwadi

    Hi,
    Based on Microsoft Security Bulletin MS12-020, this security update resolves two privately reported vulnerabilities:
    KB2621440 and KB2667402.
    http://technet.microsoft.com/en-US/security/bulletin/ms12-020
    Thanks!
    Andy Altmann
    TechNet Community Support

  • HT204318 Copied my iTunes from my Mac to my Windows 7 laptop, now there are thousands of songs missing on the Windows copy with the exclamation point.

    Copied my iTunes from my Mac to my Windows 7 laptop, now there are thousands of songs missing on the Windows copy with the exclamation point. everything shows up, playlists and tracks, there are just a bunch of songs with exclamation points. how can i properly sync my iTunes from my Mac to my PC? using iTunes

    Moving a library: Quick answer if you use iTunes' default preferences settings:  Copy the entire iTunes folder (and in doing so all its sub-folders and files) intact to the other drive.  Hold down the option (alt) key (shift on Windows) and open iTunes.  At the prompt to create or choose a library choose the copied iTunes folder.

  • HT204318 Copied my iTunes from my Mac to my Windows 7 laptop, now there are thousands of songs missing on the Windows copy with the exclamation point. everything shows up, playlists and tracks, there are just a bunch of songs with exclamation points. how

    Copied my iTunes from my Mac to my Windows 7 laptop, now there are thousands of songs missing on the Windows copy with the exclamation point. everything shows up, playlists and tracks, there are just a bunch of songs with exclamation points. how can i properly sync my iTunes from my Mac to my PC? using iTunes

    nope all my songs are copied and organized into the iTunes library.

  • HT4410 I have just installed Windows 7 64-bit full version Home Premium using Bootcamp and cannot get access to the internet. I installed on a Macbook Air Mid 2012 with Mountain Lion. Are there some drivers that are missing from the Windows 7

    Dear Apple. I have just installed Windows 7 64-bit full version Home Premium using Bootcamp and cannot get access to the internet. I installed on a Macbook Air Mid 2012 with Mountain Lion. Are there some drivers that are missing from the Windows 7 bootcamp install download from Apple

    It is a Total Misconception that the Support files are installed when you are installing Windows, even if the USB drive that holds them is inserted in the system when doing the Windows install.
    You must always Run the Setup.exe files from the support files or run the drivers individually once Windows has finished installing and booted to the desktop.
    Also you really need to run the Boot Camp Control Panel Applet and check for updates as not all the newest drivers for full function of all the hardware is included with the original support download. That download is basically a generic version to get the system working and without doing the updates not everything will work properly.

  • T61p - Please wait while Windows configures Client Security Password - Manager

    My T61p system is fully updated, however I continue to get "Please with while windows configures Client Security Password - Manager." and then the computer trys to install
    css_manager_vista_tpm.exe
    over and over again.
    What is the problem here and how can I solve?
    How can I contact Lenovo-Thinkpad to assist?
    The problem has reoccured even after I did a system restore to an earlier date.
    It seems to initiate when I first boot up and then open up "Pictures"
    Please help.
    Thanks

    Well, I take everything back. After removing all password entries and re-installing/rebooting, it worked for a while. But now it is doing it all over again. I tried to call techincal support, but they then said I would have to pay for software support and they only support hardware, and to re-install the OS. Great, jeez, I couldn't have tried that myself, and that is so simple and takes no time at all (detecing sarcasm yet?)
    I do a lot of work for large corporations that are watching the IBM=>Lenovo takeover very closely to see if they are going to drop Thinkpads altogether and go with another laptop vendor. This type of weak support does not bode well. The person I was on the phone with was rude, hard to understand, and even told me there was no place to escalate the call to.
    There is no replacement for customer support. It is sad to see no Lenovo involvement in this forum, and don't make the mistake of thinking this is an isolated problem at this time. It is growing.
    Though Thinkpads are great Laptops, Toshiba used to have the market, but their support or should I say lack of it led to their downfall and position of leadership loss.
    It will be no different if Lenovo continues to act like a machine churner.

  • Why is the "Empty Trash" option missing? All I have is "Secure Empty Trash" which takes a considerable amount of time.

    Why is the “Empty Trash” option missing? All I have is “Secure Empty Trash” which takes a considerable amount of time.

    check your finder preferences.

  • My libraries panel is missing from the window dropdown. Where else can I access it? Is that normal?

    My libraries panel is missing from the window dropdown. Where else can I access it? Is that normal?

    Lisa,
    You may try the list (or go straight to 6) if you have updated to Yosemite without reinstalling).
    The following is a general list of things you may try when the issue is not in a specific file (you may have tried/done some of them already); 1) and 2) are the easy ones for temporary strangenesses, and 3) and 4) are specifically aimed at possibly corrupt preferences); 5) is a list in itself, and 6) is the last resort.
    If possible/applicable, you should save curent artwork first, of course.
    1) Close down Illy and open again;
    2) Restart the computer (you may do that up to 3 times);
    3) Close down Illy and press Ctrl+Alt+Shift/Cmd+Option+Shift during startup (easy but irreversible);
    4) Move the folder (follow the link with that name) with Illy closed (more tedious but also more thorough and reversible);
    5) Look through and try out the relevant among the Other options (follow the link with that name, Item 7) is a list of usual suspects among other applications that may disturb and confuse Illy, Item 15) applies to CC, CS6, and maybe CS5);
    Even more seriously, you may:
    6) Uninstall, run the Cleaner Tool (if you have CS3/CS4/CS5/CS6/CC), and reinstall.
    http://www.adobe.com/support/contact/cscleanertool.html

  • Missing properties for ADMINS  group in security property file

    Hi,
    I'm getting the following error while trying to start the J2EE server
    how to overcome this
    SAP J2EE Engine Version 6.20 PatchLevel 67440.20 is starting...
    Loading: LogManager ...
    Loading: SystemThreadManager ...
    Loading: ThreadManager ...
    Loading: TimeoutManager ...
    Loading: MemoryManager ...
    Loading: PoolManager ...
    Loading: PolicyManager ...
    Loading: IpVerificationManager ...
    Loading: ClusterManager ...
    Loading: ClassLoaderManager ...
    Loading: SwapManager ...
    Loading: LockManager ...
    Loading: R3StartupManager ...
    Loading: ServiceManager ...
    Loading core services:
      Starting core service p4 ... done.
      Starting core service monitor ... done.
      Starting core service log ... done.
      Starting core service file ... done.
      Starting core service dbms ... done.
    ID000544: Error starting service security. Unexpected exception: java.lang.SecurityException: Missing properties for ADMINS group in security property file!!!
    [ServiceManager]: ID000544: Error starting service security. Unexpected exception: java.lang.SecurityException: Missing properties for ADMINS group in security property file!!!
    Exception in core service. Kernel not started.
    [ServiceManager]: * Exception in core service. Kernel not started.
    Loading: ServiceManager returned false!
    Kernel not loaded. System halted.
    Element 1779446621 disconnected.
    System Exception * Fail to start Naming. Exception is: java.lang.NullPointerException
    ThreadDeath catched in deploy when trying to start it. Rethrowning...
    [ServiceManager]: ThreadDeath catched in deploy when trying to start it. Rethrowning...
      Starting core service naming ... done.
    ThreadDeath catched in admin when trying to start it. Rethrowning...
    [ServiceManager]: ThreadDeath catched in admin when trying to start it. Rethrowning...
    Message was edited by: Lakshmi Manohar

    Hi,
    As I understand, you are using SharePoint designer worfklow on 2013 platform and you would like to edit cancelation email body for task process.
    From my experience, there is no OOB option for you to edit cancelation email body. Since workflow 2013 is different from 2010, task forms are auto-generated based upon a certain Content Type. As workaround, I'd recommend you using approval workflow on 2010
    platform. In addition, you could try codeplex 2013 approval workflow, please check the link below:
    http://sharepointwf.codeplex.com/
    More information:
    http://blogs.msdn.com/b/sharepointdesigner/archive/2012/09/14/how-to-manipulate-the-task-form-with-sharepoint-designer-for-new-task-actions.aspx
    http://msdn.microsoft.com/en-us/library/microsoft.sharepoint.workflowservices.activities.singletask.cancelationemailbody(v=office.15).aspx
    Regards,
    Rebecca Tu
    TechNet Community Support

  • Hp mini could not start because the following file is missing or corrupt /windows/s​ystem32/ha​l.dll.

    windows could not start because the following file is missing or corrupt <Windows root>\system32\hal.dll.
    then it says please re-install a copy of the above file

    Any system or sys32 and any .dll files missing or corrupted errors, usually the only fix is to reinstall windows and anything on hard drive not saved on removable drives...flash, usb, cd or floppy is lost. I've had several sys32.dll file missing or corrupted errors and asked at Best Buy Geek Squad what the fix would cost and that's how I learned the only fix is installing windows.

  • Mark/Space releases version 4 of the Missing Sync for Windows Mobile OS

    Mark/Space has released the Missing Sync for Windows Mobile version 4, which offers many feature improvements. Among them, likely the most important is support for the Windows Mobile 6 operating system.
    A full list of what's new in this release is available here.

    I installed the beta version of Missing Sync last night. It seems to be working well (contacts and calendar). Note that only Bluetooth connections are supported and you must read the detailed instructions for getting this to work.
    I have yet to try a software installation.
    I tried running Activesync 4.2 within Virtual PC 7 but it was hopeless so needed a Mac solution.

  • Windows 2012 server security checklist for corporate company standard/recommended check-list

    Hello All,
    Good Day.
    I am looking for Windows 2012 server security checklist (standard hardening
    settings), would you kindly assist me by providing Wintel 2012 standard/recommended check-list ASAP?
    Thanks in advance.

    Hi,
    The Microsoft Security Compliance Manager 3.0 tool is designed to provide you with an end-to-end solution to help you plan, deploy, and monitor security baselines for computers running Windows Server 2012 in your environment.
    For more detailed information, please refer to the articles below:
    Windows Server 2012 Security Baseline
    http://technet.microsoft.com/en-us/library/jj898542.aspx
    Security Hardening Tips and Recommendations
    http://social.technet.microsoft.com/wiki/contents/articles/18931.security-hardening-tips-and-recommendations.aspx
    Regards,
    Mandy
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Just finished update. While in the Tips, why did it tell me I have an old version? Hey there! Looks like you're using an old version of Firefox. Don't miss out on the latest technology & security features. Get the free upgrade in less than a minute.

    The top of the screen has an owl like icon & then the following message:
    Hey there! Looks like you’re using an old version of Firefox.
    Don’t miss out on the latest technology & security features.
    Get the free upgrade in less than a minute.

    Dear Colbabomb; thankyou for your links.
    So far, I looked at your first solution, Revo Uninstaller and it gives you a 30 free trial. Ergo, it will eventually cost money so I'm leery of using those kinds of programs in general, meaning most "free trials" have unwanted strings attached and often are big probs to get rid of later. Perhaps you can assure me that it is easy and very user friendly, before I proceed. And I already ran malwarebytes and it found nothing tho the program still can't be uninstalled. I downloaded Adw Cleaner and during the install, my Norton's security popped up and warned that there were (low risk) threats with two of their "other offers" and i hadn't even actually clicked to agree either of them. Nonetheless, Norton warned me against the "lyrics finder" and "deal ply." In fact, there was a box already with an x in it, saying that you are accepting deal ply if you x on "next." Well, except I unchecked that box before clicking on next, yet when it went to fully install, it still showed that it was adding itself; so, just before the install was 100% completed, I had to abort the whole thing. I really do hope your other suggestions are programs that you personally know that they don't try and trick you. But right now, I would not suggest Adw Cleaner to anyone. I even read the fine print about what they will try and install and how to decline and it still tried sticking stuff on that i believed I had declined. Anyways, i have to leave now, shall pick up later this evening, if my pc is still functioning.

  • Windows 7 internet security will not allow the installation of Flash Player 17 Update

    Windows 7 internet security will not allow the installation of the Flash Player 17 update.  I have tried the direct install using the IE_AX update without success.

    Hi,
    Thanks for the screenshot.  It's very helpful. Essentially, this is an issue with the internet security settings on your machine (Internet Explorer > Internet Options > Security), and not a Flash Player issue.  I Googled "internet security settings prevented one or more files from opening' and it returned numerous hits.  I'm posting a few for you, however, I'm not endorsing any of them.  I recommend you search your self and select one you feel comfortable with.
    https://support.microsoft.com/en-us/kb/2588679
    https://social.technet.microsoft.com/Forums/windows/en-US/6bd973a1-38b5-4ad2-bcf5-e90be18c c64b/your-internet-security-settings-prevented-one-or-more-files-from-being-opened?forum=w 7itproinstall
    How to fix: These files can’t be opened. Your Internet security settings prevented one or more files from being opened. …
    and there are many more.
    Maria

  • MSI Z87 G45 + MSI R9 280X + Windows 8.1 secure boot difficulties

    After updating to Windows 8.1 Pro I had the "Secure Boot isn't configured properly" watermark as many others. I determined my disk is GPT partitioned, I enabled UEFI on the GPU by moving the physical switch from the 2 position to the 1 position, and enabled Windows 8 Feature + Secure Boot with standard settings in the G45 bios (ver 1.5). After doing save and reboot I'm presented with a blank screen with my monitor showing a "DVI no input" message. I reset the CMOS to allow me to boot again, but after a couple more tries with the secure boot settings such as enabling/disabling Fast Boot I have not been able to get it to work.
    System:
    MSI Z87 G45
    8GB DDR3 1600mhz Crucial ram
    I5-4670k
    MSI R9 280X
    Samsung 840 SSD 250gb
    Asus cd/dvd drive

    I want to know the same thing. I bought a MSI Z87-G45 Gaming motherboard this month and I can't activate Secure Boot on it because it's still in Setup Mode. I have no idea how to put the motherboard into User Mode and Google doesn't help me much further either. How to activate a key? I have a I5-5670K and GTX 770 by the way.

Maybe you are looking for