Have you enabled remediation in your CI and deployment?
CI and Baseline isn't work
Hello,
I have created the Configuration Item and Baseline as per the attached xml file. Deployed it to a collection.
132087-dc0c1314-910e-4769-8ecc-e76e96978993.xml132088-c26079d0-c81e-4f31-9ce2-31334125739d.xml
Present Registry settings
I am using Windows 10. But I do not find below registry keys created.
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0]
"1001"=dword:00000003
"1004"=dword:00000003
Please help me if I'm doing something incorrectly
4 answers
Sort by: Most helpful
-
-
AllenLiu-MSFT 40,551 Reputation points Microsoft Vendor
2021-09-15T02:27:33.3+00:00 Hi, @Boopathi Subramaniam
Thank you for posting in Microsoft Q&A forum.We may check the Compliance Rules of the Settings of the CI, have we checked the "Remediate noncompliant rules when supported"?
Also check the "Remediate noncompliant rules when supported" in the deployment of the CB.
Then we can check the CI results on client after deployment, we can manually "Evaluate" it and click "View Report" to check the results.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. -
Rahul Jindal [MVP] 9,151 Reputation points MVP
2021-09-15T21:10:31.747+00:00 Can you share the screenshot of your baseline deployment?
-
AllenLiu-MSFT 40,551 Reputation points Microsoft Vendor
2021-09-16T09:00:27.757+00:00 Hi, @Boopathi Subramaniam
Thank you for the feedback.I test in my lab with the same configuration like yours and get the key created correctly.
So, I will double confirm with you, have you also check the "Remediate noncompliant rules when supported" in the deployment of CB?
And manually evaluate it in configuration manager properties? What's the compliance state of your CB?