cookie alert

Nous utilisons des cookies afin de vous offrir une meilleure navigation, analyser les visites du site, personnaliser les contenus et mieux cibler nos publicités. Si vous poursuivez votre visite sur ce site, vous acceptez notre utilisation des cookies

Nexthink Library

Device Compliance Advanced

Back

Device Compliance Advanced

Latest Version: 1.2.6.0
|
Updated on April 15, 2024
Install
Configuration

Description

In addition to the content provided in the Device Compliance pack, the Device Compliance Advanced pack also provides a set of Remote Action that will help you:

  • Retrieve an unique fingerprint from installed Trust Root Certificate Authorities, HOSTS file, Samba configuration and LAN Manager.
  • Authentication level to ensure if devices are in accordance with company policy.
  • Current status of Windows Security Center components.
  • Delete unwanted certificates from Trust Root Certificate Authorities.

Screenshots

Versions

  • 1.2.6.0 - 15 Apr 2024 - Updated campaign in "Disable SMB1" Remote Action
  • 1.2.5.0 - 28 Apr 2023 - Changed score run time frequency to daily
  • 1.2.4.0 - 04 Nov 2022 - Fixed documentation
  • 1.2.3.0 - 25 Jul 2022 - Updated OS requirements
  • 1.2.2.0 - 25 Jul 2022 - Removed references to non-inclusive language
  • 1.2.1.0 - 22 Jul 2022 - Updated pack to remove metrics, widgets, categories and documentation referencing antispyware
  • 1.2.0.0 - 14 Apr 2021 - Updated "Remove Certificates" Remote Action description
  • 1.1.3.0 - 14 Oct 2020 - Fixed some Metrics that were not set to all devices
  • 1.1.2.0 - 23 Sep 2020 - Fixed Compliance category
  • 1.1.1.0 - 11 Aug 2020 - Removed references to Enhance
  • 1.0.1.0 - 09 Jun 2020 - Fixed typo
  • 1.0.0.0 - 14 May 2020 - Initial release

Required Products

Nexthink Act
Nexthink Engage

Platforms

Windows 7 and newer

Compatibility

V6.14 and later

This Might Interest You

Workflow: Windows 11 migration
New

Orchestrate the Windows 11 migration process with automated compatibility checks and pre-to-post migration user engagement.

Released on April 11, 2024
View Library Pack

Workflow: Device assignment verification
New

Orchestrate the verification and update of device assignee information in the ServiceNow Hardware Asset Management database through a dedicated workflow.

Released on April 10, 2024
View Library Pack

Get SMB1 Status

Script Description

Obtains SMB1 network protocol status and prints it in 'Execution status details' field. The script is designed for Windows 10 and 7.

Execution context and suggested scheduling

Run the script as 'local system'. The script should be executed manually.

A timeout of 120 seconds is recommended.

Parameters

None.

Outputs

None.

Further Information

Before disabling SMB1 network protocol, confirm that devices in your network are not actively using it. SMB1 network protocol is enabled on all Windows 7 editions and Windows 10 releases before 1709. SMB1 protocol can be disabled by GPO setting or Nexthink Act script 'Disable-SMB1'.

Disable SMB1

Script Description

Disables SMB1 network protocol and prints script execution result in 'Execution status details' field. The script is designed for Windows 10 and 7.

Execution context and suggested scheduling

Run the script as 'local system'. The script should be executed manually.

A timeout of 120 seconds is recommended.

Parameters

Label Description
Campaign Id UID of the Disable SMB1 campaign. It informs user that their device should be manually rebooted to apply system changes

Outputs

None.

Further Information

Before disabling SMB1 network protocol, confirm that devices in your network are not actively using it. Device reboot is required to disable SMB1 protocol. The script informs user, using campaign, that the device should be manually rebooted.

Get NTLM Authentication Level

Script Description

Retrieves the NTLM authentication level to verify if devices are using NTLMv2 authentication.

Execution context and suggested scheduling

Run the script as 'local system'. The script should be executed manually.

A timeout of 120 seconds is recommended.

Parameters

None.

Outputs

None.

Further Information

The Network security: NTLM authentication level setting determines which challenge/response authentication protocol is used for network logons.
Check the possible list of security levels and their behavior here.

Trusted Root Certification Authorities certificate store integrity check

Script Description

Returns the hash of the Trusted Root Certification Authorities certificate store, as well as a list containing all their thumbprints.Useful for retrieving a unique fingerprint from all devices to ensure that the installed Trust Root Certificate Authorities are in accordance with company policy.A Finder investigation should be used to compare the retrieved fingerprints against that of a known, trusted device.

Execution context and suggested scheduling

Run the script as 'interactive user'. The script should be executed manually.

A timeout of 120 seconds is recommended.

Parameters

None.

Outputs

Label Type Description
Root CAs Hash String Hash of the Trusted Root Certification Authorities certificate store
Root CAs Thumbprints StringList List of thumbprints for the Trusted Root Certification Authorities
Other Root CAs Thumbprints StringList Continuation list of thumbprints (used only if character count exceeded 1020)

Remove Certificates

Script Description

Deletes a specific certificate based on a thumbprint provided by the user in order to avoid badly deployed certificates.

Warning: This Remote Action permanently deletes certificates from all targeted devices.

Execution context and suggested scheduling

Run the script as 'local system'. The script should be executed manually.

A timeout of 120 seconds is recommended.

Parameters

Label Description
Thumbprint Thumbprint

Outputs

None.

Further Information

DISCLAIMER - The removal of certain key CAs could potentially harm your machine. Use with caution.

Get Windows Security Center Health Status

Script Description

Returns information about health status of Windows Security Center components, that includes Firewall, AutoUpdate,AntiVirus, AntiSpyware, InternetSettings, UserAccountControl and Windows Security Center monitoring service. Possible values are:

Execution context and suggested scheduling

Run the script as 'interactive user'. The script should be executed manually.

A timeout of 120 seconds is recommended.

Parameters

None.

Outputs

Label Type Description
Anti Spyware Status String The aggregation of all anti-spyware products for target device
Anti Virus Status String The aggregation of all antivirus products for target device
Auto Update Status String The automatic update settings for target device
Firewall Status String The aggregation of all firewalls for target device
Internet Settings Status String The settings that restrict the access of web sites in each of the Internet zones for target device
User Account Control Status String The User Account Control settings for target device
Security Center Service Status String The running state of the Windows Security Center service on target device

HOSTS file integrity check

Script Description

Returns the hash of the HOSTS file, as well as a list containing all entries.Useful for retrieving a unique fingerprint from all devices to ensure that the HOSTS file is in accordance with company policy.A Finder investigation should be used to compare the retrieved fingerprints against that of a known, trusted device.

Execution context and suggested scheduling

Run the script as 'local system'. The script should be executed manually.

A timeout of 120 seconds is recommended.

Parameters

None.

Outputs

Label Type Description
Hosts File Entries Hash String Hash of the HOSTS file
Hosts File Entries StringList List of entries of the HOSTS file