CI and Baseline isn't work

Boopathi Subramaniam 3,196 Reputation points
2021-09-14T20:17:22.02+00:00

Hello,

I have created the Configuration Item and Baseline as per the attached xml file. Deployed it to a collection.

132087-dc0c1314-910e-4769-8ecc-e76e96978993.xml132088-c26079d0-c81e-4f31-9ce2-31334125739d.xml

Present Registry settings
131930-reg.jpg

I am using Windows 10. But I do not find below registry keys created.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0]
"1001"=dword:00000003
"1004"=dword:00000003

Please help me if I'm doing something incorrectly

Microsoft Configuration Manager
0 comments No comments
{count} votes

4 answers

Sort by: Most helpful
  1. Rahul Jindal [MVP] 9,151 Reputation points MVP
    2021-09-14T22:27:21.463+00:00

    Have you enabled remediation in your CI and deployment?


  2. AllenLiu-MSFT 40,551 Reputation points Microsoft Vendor
    2021-09-15T02:27:33.3+00:00

    Hi, @Boopathi Subramaniam
    Thank you for posting in Microsoft Q&A forum.

    We may check the Compliance Rules of the Settings of the CI, have we checked the "Remediate noncompliant rules when supported"?
    132184-1.jpg

    Also check the "Remediate noncompliant rules when supported" in the deployment of the CB.

    132185-2.jpg

    Then we can check the CI results on client after deployment, we can manually "Evaluate" it and click "View Report" to check the results.
    132186-3.jpg


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


  3. Rahul Jindal [MVP] 9,151 Reputation points MVP
    2021-09-15T21:10:31.747+00:00

    Can you share the screenshot of your baseline deployment?

    0 comments No comments

  4. AllenLiu-MSFT 40,551 Reputation points Microsoft Vendor
    2021-09-16T09:00:27.757+00:00

    Hi, @Boopathi Subramaniam
    Thank you for the feedback.

    I test in my lab with the same configuration like yours and get the key created correctly.
    132657-1.jpg

    So, I will double confirm with you, have you also check the "Remediate noncompliant rules when supported" in the deployment of CB?
    And manually evaluate it in configuration manager properties? What's the compliance state of your CB?
    132648-2.jpg