Library Pack Header

In addition to the content provided in the [https://www.nexthink.com/library/device-compliance/ Device Compliance] pack, the Device Compliance Advanced pack also provides a set of Remote Action that will help you:\n\n* Retrieve an unique fingerprint from installed Trust Root Certificate Authorities, HOSTS file, Samba configuration and LAN Manager.\n* Authentication level to ensure if devices are in accordance with company policy.\n* Current status of Windows Security Center components.\n* Delete unwanted certificates from Trust Root Certificate Authorities.

Device Compliance Advanced

Obtains SMB1 network protocol status and prints it in 'Execution status details' field. The script is designed for Windows 10 and 7.

Get SMB1 status

Disables SMB1 network protocol and prints script execution result in 'Execution status details' field. The script is designed for Windows 10 and 7.

UID of the Disable SMB1 campaign. It informs user that their device should be manually rebooted to apply system changes

Campaign ID

Disable SMB1

Retrieves the NTLM authentication level to verify if devices are using NTLMv2 authentication.

Get NTLM authentication level

Returns the hash of the Trusted Root Certification Authorities certificate store, as well as a list containing all their thumbprints.\nUseful for retrieving a unique fingerprint from all devices to ensure that the installed Trust Root Certificate Authorities are in accordance with company policy.\nA Finder investigation should be used to compare the retrieved fingerprints against that of a known, trusted device.

Trusted root certification authorities certificate store integrity check

Hash of the Trusted Root Certification Authorities certificate store

Root CAs hash

List of thumbprints for the Trusted Root Certification Authorities

Root CAs thumbprints

Continuation list of thumbprints (used only if character count exceeded 1020)

Other root CAs thumbprints

Deletes a specific certificate based on a thumbprint provided by the user in order to avoid badly deployed certificates.\n\n'''''Warning:''' This Remote Action permanently deletes certificates from all targeted devices.''

Thumbprint

Remove certificates

Returns information about health status of Windows Security Center components, that includes Firewall, AutoUpdate,\nAntiVirus, AntiSpyware, InternetSettings, UserAccountControl and Windows Security Center monitoring service. Possible values are:\n* Good - Does not require attention,\n* Poor - Device could be at risk,\n* NotMonitored - Not monitored by Windows Security Center,\n* Snooze - Indicates Windows Security Center is not actively protecting device.

Get Windows Security Center health status

The aggregation of all anti-spyware products for target device

AntiSpyware status

The aggregation of all antivirus products for target device

AntiVirus status

The automatic update settings for target device

AutoUpdate status

The aggregation of all firewalls for target device

Firewall status

The settings that restrict the access of web sites in each of the Internet zones for target device

Internet settings status

The User Account Control settings for target device

User Account Control status

The running state of the Windows Security Center service on target device

Security center service status

Returns the hash of the HOSTS file, as well as a list containing all entries.\nUseful for retrieving a unique fingerprint from all devices to ensure that the HOSTS file is in accordance with company policy.\nA Finder investigation should be used to compare the retrieved fingerprints against that of a known, trusted device.

Device Compliance Advanced

Description

Screenshots

Versions

Content

Required Products

Platforms

Compatibility