desktop.gov.au
desktop.gov.au copied to clipboard
⛔️ DEPRECATED - Website for Protected Utility
The following statement with the `office-365.md` document is out of date and now incorrect: `At time of writing, Microsoft Forms processes and stores data for Australian tenants within the [United...
Guidance for setting Network profile type based on network indicators / Trusted Network Connection
Is there any guidance for setting the Network profile type on an Azure Active Directory device from Public to Private. On an Active Directory joined machine this would default to...
Missing ) Internet explorer 11 Justification [Here](https://github.com/govau/desktop.gov.au/blob/develop/blueprint/client-devices.md#windows-features)
Under ACSC - Microsoft Office Hardening... Control - PowerPoint 97-2003 presentations, shows, templates and add-in files | User | \Microsoft PowerPoint 2016\PowerPoint Options\Security\Trust Center\File Block Settings **| Enabled (Always match...
https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/select-types-of-rules-to-create EV Signers in the Client Devices design, recommending this be Not-Required
Configuration listed [here](https://desktop.gov.au/blueprint/abac/platform.html#licensing) for _rol-Agency-administrators_ is not possible to apply. Office 365 Privileged Access Management requres: - **SharePoint (Plan 2)** -> _Set to Off in configuration_ - SharePoint (Plan 1)...
Current design: >[Client devices (desktop.gov.au)](https://desktop.gov.au/blueprint/client-devices.html) with probably more references > >Windows 10 hardening >The following design components apply to the hardening of Microsoft Windows 10 21H1 and above. > >The...
Update the blueprint to include guidance on the use of Windows 11. - Planned but not started pending release of guidance from the ACSC on the use and hardening of...
Include some guidance for Windows Hello for Business: * Essential 8 / MFA * Design inclusion * ABAC * Security Plans Refer to old closed PR #74 for more info
Look at updating the guidance around Password Hash Sync