DISA Microsoft Intune MDM Service Desktop STIG
Version V1R1. The framework. A check that names a requirement in its Control attribute supports it; it does not make the tenant compliant.
6 of 12 requirements have a Maester check. 6 have none yet: a place to contribute, or a requirement that cannot be checked from a tenant.
Run these
Invoke-Maester -Suite disaCAT II6 of 12
V-267303Microsoft Intune service must initiate a session lock after a 15-minute period of inactivity. DISA.V-267303Has a check
V-267309Microsoft Intune service must automatically disable accounts after a 35-day period of account inactivity. DISA.V-267309Has a check
V-267314Microsoft Intune service must enforce the limit of three consecutive invalid login attempts by a user during a 15-minute time period. DISA.V-267314Has a check
V-267315No Maester check yetNo check
V-267334Microsoft Intune service must be configured to transfer Intune logs to another server for storage, analysis, and reporting at least every seven days. DISA.V-267334Has a check
V-267341Microsoft Intune service must be configured to use multifactor authentication for network access to privileged and nonprivileged accounts. DISA.V-267341Has a check
V-267355Microsoft Intune service must enforce a 60-day maximum password lifetime restriction. DISA.V-267355Has a check
V-267372No Maester check yetNo check
V-267373No Maester check yetNo check
V-267374No Maester check yetNo check
V-267375No Maester check yetNo check
V-267379No Maester check yetNo check