I have the following issue with SCCM Baseline Compliant.
For SCCM Baseline compliance when set for the Baseline Compliant Item
Set to check with Script auditpol /get /category:"Policy Change"
But get compliance report, under the Expression, it is showing all the titles and subtitle as the results.
How can i get the Baseline Compliant to pull out only eg Authentication Policy Change showing Success and Failure is enabled and setting Compliance Rule to determine it is compliant or non-compliant.
Most of the searches are auditpol /set only
Currently, my script above just pull out all the settings as per the output below.
The Auditpol.exe when get the Category will shows all the subcategory settings. I need to able to tackle a particular subcategory and to able to get the result whether Success and Failure are in place with the compliance rules to check if it compliant or not. How can I go about it with PowerShell for individual subcategory instead of the result in the table above which are incorrect as all the titles names are also inside the evaluation.
PS C:\Windows\system32> auditpol /get /category:"Policy Change"
So you see whatever output are listed in the compliant report as Expression Equal Success which is totally not what it meant to be. How can set the script so that it can check if the individual subcategory are set to Success and Failure and the compliant rule to check if it is compliant.
Kindly advise. Thank you