fix: make all Windows baselines enforceable - #119
Merged
Amir Bredy (ABMFST) merged 3 commits intoAug 10, 2026
Conversation
added 3 commits
August 9, 2026 20:19
Use safe Test wrappers for legacy account-policy and value-less controls, accept effective firewall defaults, and treat role-managed NTP state as informational. The full 12-baseline Azure Machine Configuration matrix passes Audit and ApplyAndAutoCorrect with OSConfig 1.4.3. Co-authored-by: Copilot <[email protected]> Copilot-Session: 48993ee6-f068-4c4a-b317-2cd940fab804
Publish the fully validated Windows baseline enforcement repairs and align Full-edition package metadata and public documentation for the new Windows/Linux prerelease. Co-authored-by: Copilot <[email protected]> Copilot-Session: 48993ee6-f068-4c4a-b317-2cd940fab804
Keep the deterministic WS2022 repair generator aligned with the validated domain firewall expressions so hosted tests do not regenerate strict assertions for unset DefaultInboundAction values. Co-authored-by: Copilot <[email protected]> Copilot-Session: 48993ee6-f068-4c4a-b317-2cd940fab804
Amir Bredy (ABMFST)
deleted the
fix/windows-baseline-enforcement-v03103
branch
August 10, 2026 03:42
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
v0.3.103prereleaseValidation
UseMachineIdregression probe changed from0to1on every targetLocal constraints