Blade ZipKit - Component Template with Remediation - Windows 2012 Standard Configuration Example

Version 6
    Blade ZipKit Package Info
    Name: Component Template with Remediation - Windows 2012 Standard Configuration Example
    Type:Component Template (version Neutral)
    BSA Compatible Version: 8.3, 8.5, 8.6, 8.7
    Version: 1.1
    More Info:https://docs.bmc.com/docs/display/public/bsa85/Working+with+components+and+component+templates

    Created by: Akbar Aziz

    Tested on version: 8.3.03.82, 8.5.00.416, 8.6.00.215, 8.7.00.239
    Tested against host running on: Windows 2012

     

    This Component Template performs the following actions:

    • Creates a Component Template called Windows 2012 Standard Configuration
    • Imports multiple depot objects for auto-remediation
    • Checks if the Guest Account is disabled (auto-remediation enabled)
    • Checks if the Administrator Account has been renamed
    • Checks the RSCD agent version installed is 8.6.00.215 (auto-remediation enabled). For 8.3, it will check for version 8.3.03.82
    • Checks the BladeLogic Agent service is set to start automatically and running (auto-remediation enabled)
    • Checks the VMware Tools version installed is 9.0.10.29005 (auto-remediation enabled)
    • Checks the NotePad++ version installed is 6.7 (auto-remediation enabled)
    • Checks if Do not require CTRL+ALT+DEL security policy is disabled for Interactive Logon (auto-remediation enabled)
    • Checks if Do not display last user name security policy is enabled for Interactive Logon (auto-remediation enabled)
    • Checks if Message title for users attempting to log on security policy is enabled for Interactive Logon (auto-remediation enabled)
    • Checks if Message text for users attempting to log on security policy is enabled for Interactive Logon (auto-remediation enabled)
    • Checks if Minimum Password length security policy is set to 8 (auto-remediation enabled)
    • Checks if Remote Desktop is enabled (auto-remediation enabled)
    • Checks if Internet Explorer Enhanced Security Configuration is disabled for the Administrator user (auto-remediation enabled)


    Instructions for importing the package:

    1. Download the attached zip file
    2. From the BSA Console, select Component Templates , right-click and select Import (version-neutral)
    3. Browse to the location of the download file
    4. Check the box for "Automatically map or create export group"
    5. Click Next twice
    6. Select a location where to place this new package in BSA (default will keep structure of the package as it was exported)
    7. Click Finish

     

    Once the import has completed, browse to the location of the package in Component Templates to confirm the configuration and settings.

     

    There are Auto-Remediation tasks enabled so please un-check if not needed.


    Here is an example screen-shot from BMC Server Automation:

    2014-04-04_16-11-56.png

    Example results from the initial compliance job run:

    2014-04-04_16-17-27.png


    Second compliance job results with Auto-Remediation enabled:

    2014-04-04_16-17-53.png

     

     

    Community.jpg

    *Note: This is a community supported package.