I think you'll find that this is doing an exact match so in order to be compliant with this CI you must have BOTH administrators AND Backup Operators. You'd need to create a different CI just for Administrators
From: [email protected] [mailto:[email protected]] On Behalf Of Abhijeet Janwalkar Sent: 25 March 2015 15:11 To: [email protected] Subject: [mssms] SCCM 2012 R2 Compliance Hi All, I am trying to configure compliance with SCCM 2012 R2. We have our =company standards which I need to create baselines for. I used exported Baselines from SCM and imported them to SCCM to re-use the scripts. I am using least privilege CI and modified as per my requirement. The issue is as per my organization standard, I can have more users than what MS states or are currently available on the server, but it still gives me as a non-compliant. Here is the example. Expression(expected) Current Value (on Server) Equals "Administrators, Backup Operators" Administrators We can have administrators and backup operators as approved groups while on the server only Administrators group is present, so the Server is compliant but it still flags as non-compliant. I have configured such settings in vRealize Configuration Manager, there we had Regex Operators (| = or, & = and etc). I tried those but no luck. Does anyone know any such thing with SCCM. Any help is much appreciated. Thanks in advance. -- Warm Regards, Abhijeet Janwalkar Blog: http://abhijeet-janwalkar.blogspot.com
