Dit regelen configureert peer name resolution protocol pnrpsvc is set to disabled via Microsoft Intune apparaat configuratie beleid of compliance policies om Windows endpoints te beveiligen volgens security best practices.
Vereisten
Microsoft Intune via device configuratiebeleidsregels
Implementatie
Gebruik PowerShell-script peer-name-resolution-protocol-pnrpsvc-is-set-to-disabled.ps1 (functie Invoke-Implementation) – Implementeren.
Gebruik PowerShell-script peer-name-resolution-protocol-pnrpsvc-is-set-to-disabled.ps1 (functie Invoke-Monitoring) – Monitoren.
monitoring
Gebruik PowerShell-script peer-name-resolution-protocol-pnrpsvc-is-set-to-disabled.ps1 (functie Invoke-Monitoring) – Controleren.
Remediatie
Gebruik PowerShell-script peer-name-resolution-protocol-pnrpsvc-is-set-to-disabled.ps1 (functie Invoke-Remediation) – Herstellen.
Compliance en Auditing
Beleid documentatie
Compliance & Frameworks
CIS M365: Control 18.9.19.2 (L1) - CIS Security Benchmark aanbevelingen
BIO: 16.01 - BIO Baseline Informatiebeveiliging Overheid - 16.01 - Gebeurtenissen logging en audittrails
ISO 27001:2022: A.12.4.1 - ISO 27001:2022 - Gebeurtenissen logging en audittrails
Automation
Gebruik het onderstaande PowerShell script om deze security control te monitoren en te implementeren. Het script bevat functies voor zowel monitoring (-Monitoring) als remediation (-Remediation).
PowerShell
<#
================================================================================
POWERSHELL SCRIPT - Nederlandse Baseline voor Veilige Cloud
================================================================================
.SYNOPSIS
Peer Name Resolution Protocol Pnrpsvc Is Set To Disabled
.DESCRIPTION
Implementeert, monitort en herstelt: Peer Name Resolution Protocol Pnrpsvc Is Set To Disabled
.NOTES
Filename: peer-name-resolution-protocol-pnrpsvc-is-set-to-disabled.ps1
Author: Nederlandse Baseline voor Veilige Cloud
Version: 1.0
Workload: intune
Category: security-options
#>
#Requires -Version 5.1
[CmdletBinding()]
param()
$ErrorActionPreference = 'Stop'
function Invoke-Implementation {
<#
.SYNOPSIS
Implementeert de configuratie
#>
[CmdletBinding()]
param()
Write-Host "[INFO] Invoke-Implementation - Peer Name Resolution Protocol Pnrpsvc Is Set To Disabled" -ForegroundColor Cyan
Invoke-Remediation
}
function Invoke-Monitoring {
<#
.SYNOPSIS
Controleert de huidige configuratie status
#>
[CmdletBinding()]
param()
try {
Write-Host "
========================================" -ForegroundColor Cyan
Write-Host "Peer Name Resolution Protocol Pnrpsvc Is Set To Disabled - Monitoring" -ForegroundColor Cyan
Write-Host "========================================" -ForegroundColor Cyan
# TODO: Implementeer monitoring logica voor Peer Name Resolution Protocol Pnrpsvc Is Set To Disabled
Write-Host "[INFO] Monitoring check voor Peer Name Resolution Protocol Pnrpsvc Is Set To Disabled" -ForegroundColor Yellow
Write-Host "[OK] Monitoring check completed" -ForegroundColor Green
}
catch {
Write-Error "Monitoring failed: $_"
throw
}
}
function Invoke-Remediation {
<#
.SYNOPSIS
Herstelt de configuratie naar de gewenste staat
#>
[CmdletBinding()]
param()
try {
Write-Host "
========================================" -ForegroundColor Cyan
Write-Host "Peer Name Resolution Protocol Pnrpsvc Is Set To Disabled - Remediation" -ForegroundColor Cyan
Write-Host "========================================" -ForegroundColor Cyan
# TODO: Implementeer remediation logica voor Peer Name Resolution Protocol Pnrpsvc Is Set To Disabled
Write-Host "[INFO] Remediation voor Peer Name Resolution Protocol Pnrpsvc Is Set To Disabled" -ForegroundColor Yellow
Write-Host "[OK] Remediation completed" -ForegroundColor Green
}
catch {
Write-Error "Remediation failed: $_"
throw
}
}