Manage compliance and endpoint protection settings - Managing Enterprise Devices and Apps - page 182

Restore Use this button to restore a particular revision. Restoring a revision creates a
new revision that is based on the settings of the restored revision.

■

Properties

Use this button to view the properties of a particular revision.

■

MORE INFO CREATING CONFIGURATION ITEMS

You can learn more about creating configuration items at http://technet.microsoft.com
/en-us/library/gg712331.aspx .

Coniguration item settings
You have several choices for the types of settings to monitor when you create a configura-
tion item for Windows operating systems, mobile device support, or Mac OS X. Each type of
configuration setting is evaluated against its own compliance rules and has its own values to
monitor.
When configuring compliance rules, the options you have range from simply checking
whether a setting exists to comparing it to a specific value. You then specify the severity level
if the condition is not met.

Windows settings
When you create a Windows configuration item, you can monitor several aspects of
Windows-based computers. The following list describes the setting types that you can moni-
tor for computers running Windows operating systems:

Active Directory Query Use this setting type to construct a query to find values in
Active Directory Domain Services (AD DS).

■

Assembly Use this setting type to specify an assembly from the global assembly
cache to assess for compliance on computers.

■

File System Use this setting type to specify a file or folder to assess for compliance
on computers.

■

IIS Metabase Use this setting type to specify the Internet Information Services (IIS)
metabase setting to assess for compliance on computers.

■

Use this setting type to specify a registry key to assess for compliance

Registry Key ■

on computers.

Registry Value Use this setting type to specify a registry value to assess for compli-
ance on computers.

■

Use this setting type to specify two scripts:

Script

■

A discovery script to identify and return a value

■

A remediation script to remediate the noncompliant setting

■

Use this setting type to specify a SQL query to assess for compliance on

SQL Query ■

computers.