Skip to content

Commit c33b120

Browse files
ssokolicssokolic
committed
feat: added STIG August 2023 configurations
1 parent d425734 commit c33b120

17 files changed

+30235
-0
lines changed

‎STIG/dod_stig_august_2023/DoD_Adobe_Acrobat_Pro_DC_Continuous_STIG_Computer_V2R1.ps1

Lines changed: 222 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,222 @@
1+
Configuration 'DoD_Adobe_Acrobat_Pro_DC_Continuous_STIG_Computer_V2R1'
2+
{
3+
Import-DscResource -ModuleName 'PSDesiredStateConfiguration'
4+
Import-DSCResource -ModuleName 'GPRegistryPolicyDsc' -ModuleVersion '1.2.0'
5+
Import-DSCResource -ModuleName 'AuditPolicyDSC' -ModuleVersion '1.4.0.0'
6+
Import-DSCResource -ModuleName 'SecurityPolicyDSC' -ModuleVersion '2.10.0.0'
7+
8+
Node 'DoD_Adobe_Acrobat_Pro_DC_Continuous_STIG_Computer_V2R1'
9+
{
10+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Adobe\Adobe Acrobat\DC\Installer\DisableMaintenance'
11+
{
12+
ValueName = 'DisableMaintenance'
13+
ValueData = 1
14+
ValueType = 'Dword'
15+
TargetType = 'ComputerConfiguration'
16+
Key = 'SOFTWARE\Adobe\Adobe Acrobat\DC\Installer'
17+
}
18+
19+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\bEnhancedSecurityStandalone'
20+
{
21+
ValueName = 'bEnhancedSecurityStandalone'
22+
ValueData = 1
23+
ValueType = 'Dword'
24+
TargetType = 'ComputerConfiguration'
25+
Key = 'SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown'
26+
}
27+
28+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\bEnhancedSecurityInBrowser'
29+
{
30+
ValueName = 'bEnhancedSecurityInBrowser'
31+
ValueData = 1
32+
ValueType = 'Dword'
33+
TargetType = 'ComputerConfiguration'
34+
Key = 'SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown'
35+
}
36+
37+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\iFileAttachmentPerms'
38+
{
39+
ValueName = 'iFileAttachmentPerms'
40+
ValueData = 1
41+
ValueType = 'Dword'
42+
TargetType = 'ComputerConfiguration'
43+
Key = 'SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown'
44+
}
45+
46+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\bEnableFlash'
47+
{
48+
ValueName = 'bEnableFlash'
49+
ValueData = 0
50+
ValueType = 'Dword'
51+
TargetType = 'ComputerConfiguration'
52+
Key = 'SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown'
53+
}
54+
55+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\bDisableTrustedFolders'
56+
{
57+
ValueName = 'bDisableTrustedFolders'
58+
ValueData = 1
59+
ValueType = 'Dword'
60+
TargetType = 'ComputerConfiguration'
61+
Key = 'SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown'
62+
}
63+
64+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\bProtectedMode'
65+
{
66+
ValueName = 'bProtectedMode'
67+
ValueData = 1
68+
ValueType = 'Dword'
69+
TargetType = 'ComputerConfiguration'
70+
Key = 'SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown'
71+
}
72+
73+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\iProtectedView'
74+
{
75+
ValueName = 'iProtectedView'
76+
ValueData = 2
77+
ValueType = 'Dword'
78+
TargetType = 'ComputerConfiguration'
79+
Key = 'SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown'
80+
}
81+
82+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\bDisablePDFHandlerSwitching'
83+
{
84+
ValueName = 'bDisablePDFHandlerSwitching'
85+
ValueData = 1
86+
ValueType = 'Dword'
87+
TargetType = 'ComputerConfiguration'
88+
Key = 'SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown'
89+
}
90+
91+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\bDisableTrustedSites'
92+
{
93+
ValueName = 'bDisableTrustedSites'
94+
ValueData = 1
95+
ValueType = 'Dword'
96+
TargetType = 'ComputerConfiguration'
97+
Key = 'SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown'
98+
}
99+
100+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\cCloud\bAdobeSendPluginToggle'
101+
{
102+
ValueName = 'bAdobeSendPluginToggle'
103+
ValueData = 1
104+
ValueType = 'Dword'
105+
TargetType = 'ComputerConfiguration'
106+
Key = 'SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\cCloud'
107+
}
108+
109+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\cCloud\bDisableADCFileStore'
110+
{
111+
ValueName = 'bDisableADCFileStore'
112+
ValueData = 1
113+
ValueType = 'Dword'
114+
TargetType = 'ComputerConfiguration'
115+
Key = 'SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\cCloud'
116+
}
117+
118+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\cDefaultLaunchURLPerms\iUnknownURLPerms'
119+
{
120+
ValueName = 'iUnknownURLPerms'
121+
ValueData = 3
122+
ValueType = 'Dword'
123+
TargetType = 'ComputerConfiguration'
124+
Key = 'SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\cDefaultLaunchURLPerms'
125+
}
126+
127+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\cDefaultLaunchURLPerms\iURLPerms'
128+
{
129+
ValueName = 'iURLPerms'
130+
ValueData = 1
131+
ValueType = 'Dword'
132+
TargetType = 'ComputerConfiguration'
133+
Key = 'SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\cDefaultLaunchURLPerms'
134+
}
135+
136+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\cServices\bTogglePrefsSync'
137+
{
138+
ValueName = 'bTogglePrefsSync'
139+
ValueData = 1
140+
ValueType = 'Dword'
141+
TargetType = 'ComputerConfiguration'
142+
Key = 'SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\cServices'
143+
}
144+
145+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\cServices\bToggleWebConnectors'
146+
{
147+
ValueName = 'bToggleWebConnectors'
148+
ValueData = 1
149+
ValueType = 'Dword'
150+
TargetType = 'ComputerConfiguration'
151+
Key = 'SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\cServices'
152+
}
153+
154+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\cSharePoint\bDisableSharePointFeatures'
155+
{
156+
ValueName = 'bDisableSharePointFeatures'
157+
ValueData = 1
158+
ValueType = 'Dword'
159+
TargetType = 'ComputerConfiguration'
160+
Key = 'SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\cSharePoint'
161+
}
162+
163+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\cWebmailProfiles\bDisableWebmail'
164+
{
165+
ValueName = 'bDisableWebmail'
166+
ValueData = 1
167+
ValueType = 'Dword'
168+
TargetType = 'ComputerConfiguration'
169+
Key = 'SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\cWebmailProfiles'
170+
}
171+
172+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\cWelcomeScreen\bShowWelcomeScreen'
173+
{
174+
ValueName = 'bShowWelcomeScreen'
175+
ValueData = 0
176+
ValueType = 'Dword'
177+
TargetType = 'ComputerConfiguration'
178+
Key = 'SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockdown\cWelcomeScreen'
179+
}
180+
181+
RegistryPolicyFile 'Registry(POL): HKLM:\SOFTWARE\Wow6432Node\Adobe\Adobe Acrobat\DC\Installer\DisableMaintenance'
182+
{
183+
ValueName = 'DisableMaintenance'
184+
ValueData = 1
185+
ValueType = 'Dword'
186+
TargetType = 'ComputerConfiguration'
187+
Key = 'SOFTWARE\Wow6432Node\Adobe\Adobe Acrobat\DC\Installer'
188+
}
189+
190+
<#RegistryPolicyFile 'Registry(POL): HKCU:\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\bFIPSMode'
191+
{
192+
ValueName = 'bFIPSMode'
193+
ValueData = 1
194+
ValueType = 'Dword'
195+
TargetType = 'ComputerConfiguration'
196+
Key = 'HKCU:\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral'
197+
}#>
198+
199+
<#RegistryPolicyFile 'Registry(POL): HKCU:\SOFTWARE\Adobe\Adobe Acrobat\DC\Security\cDigSig\cAdobeDownload\bLoadSettingsFromURL'
200+
{
201+
ValueName = 'bLoadSettingsFromURL'
202+
ValueData = 0
203+
ValueType = 'Dword'
204+
TargetType = 'ComputerConfiguration'
205+
Key = 'HKCU:\SOFTWARE\Adobe\Adobe Acrobat\DC\Security\cDigSig\cAdobeDownload'
206+
}#>
207+
208+
<#RegistryPolicyFile 'Registry(POL): HKCU:\SOFTWARE\Adobe\Adobe Acrobat\DC\Security\cDigSig\cEUTLDownload\bLoadSettingsFromURL'
209+
{
210+
ValueName = 'bLoadSettingsFromURL'
211+
ValueData = 0
212+
ValueType = 'Dword'
213+
TargetType = 'ComputerConfiguration'
214+
Key = 'HKCU:\SOFTWARE\Adobe\Adobe Acrobat\DC\Security\cDigSig\cEUTLDownload'
215+
}#>
216+
217+
RefreshRegistryPolicy 'ActivateClientSideExtension'
218+
{
219+
IsSingleInstance = 'Yes'
220+
}
221+
}
222+
}

0 commit comments

Comments
 (0)