|
866 | 866 | "type": "number", |
867 | 867 | "name": "standards.NudgeMFA.snoozeDurationInDays", |
868 | 868 | "label": "Number of days to allow users to skip registering Authenticator (0-14, default is 1)", |
869 | | - "defaultValue": 1 |
| 869 | + "defaultValue": 1, |
| 870 | + "validators": { |
| 871 | + "min": { "value": 0, "message": "Minimum value is 0" }, |
| 872 | + "max": { "value": 14, "message": "Maximum value is 14" } |
| 873 | + } |
870 | 874 | } |
871 | 875 | ], |
872 | 876 | "label": "Sets the state for the request to setup Authenticator", |
|
1104 | 1108 | "name": "standards.StaleEntraDevices", |
1105 | 1109 | "cat": "Entra (AAD) Standards", |
1106 | 1110 | "tag": ["Essential 8 (1501)", "NIST CSF 2.0 (ID.AM-08)", "NIST CSF 2.0 (PR.PS-03)"], |
1107 | | - "helpText": "Remediate is currently not available. Cleans up Entra devices that have not connected/signed in for the specified number of days.", |
| 1111 | + "helpText": "**Remediate is currently not available**. Cleans up Entra devices that have not connected/signed in for the specified number of days.", |
1108 | 1112 | "docsDescription": "Remediate is currently not available. Cleans up Entra devices that have not connected/signed in for the specified number of days. First disables and later deletes the devices. More info can be found in the [Microsoft documentation](https://learn.microsoft.com/en-us/entra/identity/devices/manage-stale-devices)", |
1109 | 1113 | "executiveText": "Automatically identifies and removes inactive devices that haven't connected to company systems for a specified period, reducing security risks from abandoned or lost devices. This maintains a clean device inventory and prevents potential unauthorized access through dormant device registrations.", |
1110 | 1114 | "addedComponent": [ |
1111 | 1115 | { |
1112 | 1116 | "type": "number", |
1113 | 1117 | "name": "standards.StaleEntraDevices.deviceAgeThreshold", |
1114 | | - "label": "Days before stale(Do not set below 30)" |
| 1118 | + "label": "Days before stale(Do not set below 30)", |
| 1119 | + "validators": { |
| 1120 | + "min": { "value": 30, "message": "Minimum value is 30" } |
| 1121 | + } |
1115 | 1122 | } |
1116 | 1123 | ], |
1117 | 1124 | "disabledFeatures": { |
1118 | 1125 | "report": false, |
1119 | 1126 | "warn": false, |
1120 | | - "remediate": false |
| 1127 | + "remediate": true |
1121 | 1128 | }, |
1122 | 1129 | "label": "Cleanup stale Entra devices", |
1123 | 1130 | "impact": "High Impact", |
|
1702 | 1709 | "powershellEquivalent": "Set-OrganizationConfig -AuditDisabled $false", |
1703 | 1710 | "recommendedBy": ["CIS", "CIPP"] |
1704 | 1711 | }, |
| 1712 | + { |
| 1713 | + "name": "standards.AutoArchive", |
| 1714 | + "cat": "Exchange Standards", |
| 1715 | + "tag": [], |
| 1716 | + "helpText": "Configures the auto-archiving threshold percentage for the tenant. When a mailbox exceeds this threshold, the oldest items are automatically moved to the archive mailbox. Archive must be enabled manually or via the CIPP standard 'Enable Online Archive for all users'. More information can be found in [Microsoft's documentation.](https://learn.microsoft.com/en-us/exchange/security-and-compliance/messaging-records-management/auto-archiving)", |
| 1717 | + "docsDescription": "Configures the auto-archiving threshold at the organization level. Auto-archiving automatically moves the oldest items from a user's primary mailbox to their archive mailbox when mailbox usage exceeds the configured threshold percentage. This prevents mail flow disruptions caused by full mailboxes. Valid range is 80-100, where 100 disables auto-archiving for the tenant. More information can be found in [Microsoft's documentation.](https://learn.microsoft.com/en-us/exchange/security-and-compliance/messaging-records-management/auto-archiving)", |
| 1718 | + "executiveText": "Configures automatic archiving of mailbox items when storage approaches capacity, preventing email delivery failures due to full mailboxes. This proactive storage management ensures business continuity and reduces helpdesk tickets related to mailbox quota issues.", |
| 1719 | + "addedComponent": [ |
| 1720 | + { |
| 1721 | + "type": "number", |
| 1722 | + "name": "standards.AutoArchive.AutoArchivingThresholdPercentage", |
| 1723 | + "label": "Auto-Archiving Threshold Percentage (80-100, default 96, 100 disables)", |
| 1724 | + "defaultValue": 96, |
| 1725 | + "validators": { |
| 1726 | + "min": { "value": 80, "message": "Minimum value is 80" }, |
| 1727 | + "max": { "value": 100, "message": "Maximum value is 100" } |
| 1728 | + } |
| 1729 | + } |
| 1730 | + ], |
| 1731 | + "label": "Configure Auto-Archiving Threshold", |
| 1732 | + "impact": "Low Impact", |
| 1733 | + "impactColour": "info", |
| 1734 | + "addedDate": "2025-12-11", |
| 1735 | + "powershellEquivalent": "Set-OrganizationConfig -AutoArchivingThresholdPercentage 80-100", |
| 1736 | + "recommendedBy": [] |
| 1737 | + }, |
1705 | 1738 | { |
1706 | 1739 | "name": "standards.SendReceiveLimitTenant", |
1707 | 1740 | "cat": "Exchange Standards", |
|
1713 | 1746 | "type": "number", |
1714 | 1747 | "name": "standards.SendReceiveLimitTenant.SendLimit", |
1715 | 1748 | "label": "Send limit in MB (Default is 35)", |
1716 | | - "defaultValue": 35 |
| 1749 | + "defaultValue": 35, |
| 1750 | + "validators": { |
| 1751 | + "min": { "value": 1, "message": "Minimum value is 1" }, |
| 1752 | + "max": { "value": 150, "message": "Maximum value is 150" } |
| 1753 | + } |
1717 | 1754 | }, |
1718 | 1755 | { |
1719 | 1756 | "type": "number", |
1720 | 1757 | "name": "standards.SendReceiveLimitTenant.ReceiveLimit", |
1721 | 1758 | "label": "Receive Limit in MB (Default is 36)", |
1722 | | - "defaultValue": 36 |
| 1759 | + "defaultValue": 36, |
| 1760 | + "validators": { |
| 1761 | + "min": { "value": 1, "message": "Minimum value is 1" }, |
| 1762 | + "max": { "value": 150, "message": "Maximum value is 150" } |
| 1763 | + } |
1723 | 1764 | } |
1724 | 1765 | ], |
1725 | 1766 | "label": "Set send/receive size limits", |
|
1814 | 1855 | "type": "number", |
1815 | 1856 | "name": "standards.EXOOutboundSpamLimits.RecipientLimitExternalPerHour", |
1816 | 1857 | "label": "External Recipient Limit Per Hour", |
1817 | | - "defaultValue": 400 |
| 1858 | + "defaultValue": 400, |
| 1859 | + "validators": { |
| 1860 | + "min": { "value": 0, "message": "Minimum value is 0" }, |
| 1861 | + "max": { "value": 10000, "message": "Maximum value is 10000" } |
| 1862 | + } |
1818 | 1863 | }, |
1819 | 1864 | { |
1820 | 1865 | "type": "number", |
1821 | 1866 | "name": "standards.EXOOutboundSpamLimits.RecipientLimitInternalPerHour", |
1822 | 1867 | "label": "Internal Recipient Limit Per Hour", |
1823 | | - "defaultValue": 800 |
| 1868 | + "defaultValue": 800, |
| 1869 | + "validators": { |
| 1870 | + "min": { "value": 0, "message": "Minimum value is 0" }, |
| 1871 | + "max": { "value": 10000, "message": "Maximum value is 10000" } |
| 1872 | + } |
1824 | 1873 | }, |
1825 | 1874 | { |
1826 | 1875 | "type": "number", |
1827 | 1876 | "name": "standards.EXOOutboundSpamLimits.RecipientLimitPerDay", |
1828 | 1877 | "label": "Daily Recipient Limit", |
1829 | | - "defaultValue": 800 |
| 1878 | + "defaultValue": 800, |
| 1879 | + "validators": { |
| 1880 | + "min": { "value": 0, "message": "Minimum value is 0" }, |
| 1881 | + "max": { "value": 10000, "message": "Maximum value is 10000" } |
| 1882 | + } |
1830 | 1883 | }, |
1831 | 1884 | { |
1832 | 1885 | "type": "autoComplete", |
|
1959 | 2012 | "type": "number", |
1960 | 2013 | "name": "standards.ShortenMeetings.DefaultMinutesToReduceShortEventsBy", |
1961 | 2014 | "label": "Minutes to reduce short calendar events by (Default is 5)", |
1962 | | - "defaultValue": 5 |
| 2015 | + "defaultValue": 5, |
| 2016 | + "validators": { |
| 2017 | + "min": { "value": 0, "message": "Minimum value is 0" }, |
| 2018 | + "max": { "value": 29, "message": "Maximum value is 29" } |
| 2019 | + } |
1963 | 2020 | }, |
1964 | 2021 | { |
1965 | 2022 | "type": "number", |
1966 | 2023 | "name": "standards.ShortenMeetings.DefaultMinutesToReduceLongEventsBy", |
1967 | 2024 | "label": "Minutes to reduce long calendar events by (Default is 10)", |
1968 | | - "defaultValue": 10 |
| 2025 | + "defaultValue": 10, |
| 2026 | + "validators": { |
| 2027 | + "min": { "value": 0, "message": "Minimum value is 0" }, |
| 2028 | + "max": { "value": 29, "message": "Maximum value is 29" } |
| 2029 | + } |
1969 | 2030 | } |
1970 | 2031 | ], |
1971 | 2032 | "label": "Set shorten meetings state", |
|
2389 | 2450 | "type": "number", |
2390 | 2451 | "label": "Phishing email threshold. (Default 1)", |
2391 | 2452 | "name": "standards.AntiPhishPolicy.PhishThresholdLevel", |
2392 | | - "defaultValue": 1 |
| 2453 | + "defaultValue": 1, |
| 2454 | + "validators": { |
| 2455 | + "min": { "value": 1, "message": "Minimum value is 1" }, |
| 2456 | + "max": { "value": 4, "message": "Maximum value is 4" } |
| 2457 | + } |
2393 | 2458 | }, |
2394 | 2459 | { |
2395 | 2460 | "type": "switch", |
|
2885 | 2950 | "type": "number", |
2886 | 2951 | "label": "Bulk email threshold (Default 7)", |
2887 | 2952 | "name": "standards.SpamFilterPolicy.BulkThreshold", |
2888 | | - "defaultValue": 7 |
| 2953 | + "defaultValue": 7, |
| 2954 | + "validators": { |
| 2955 | + "min": { "value": 1, "message": "Minimum value is 1" }, |
| 2956 | + "max": { "value": 9, "message": "Maximum value is 9" } |
| 2957 | + } |
2889 | 2958 | }, |
2890 | 2959 | { |
2891 | 2960 | "type": "autoComplete", |
|
3380 | 3449 | { |
3381 | 3450 | "type": "number", |
3382 | 3451 | "name": "standards.IntuneComplianceSettings.deviceComplianceCheckinThresholdDays", |
3383 | | - "label": "Compliance status validity period (days)" |
| 3452 | + "label": "Compliance status validity period (days)", |
| 3453 | + "defaultValue": 130, |
| 3454 | + "validators": { |
| 3455 | + "min": { "value": 1, "message": "Minimum value is 1" }, |
| 3456 | + "max": { "value": 120, "message": "Maximum value is 120" } |
| 3457 | + } |
3384 | 3458 | } |
3385 | 3459 | ], |
3386 | 3460 | "label": "Set Intune Compliance Settings", |
|
3543 | 3617 | "type": "number", |
3544 | 3618 | "name": "standards.EnrollmentWindowsHelloForBusinessConfiguration.pinMinimumLength", |
3545 | 3619 | "label": "Minimum PIN length (4-127)", |
3546 | | - "default": 4 |
| 3620 | + "default": 4, |
| 3621 | + "validators": { |
| 3622 | + "min": { "value": 4, "message": "Minimum value is 4" }, |
| 3623 | + "max": { "value": 127, "message": "Maximum value is 127" } |
| 3624 | + } |
3547 | 3625 | }, |
3548 | 3626 | { |
3549 | 3627 | "type": "number", |
3550 | 3628 | "name": "standards.EnrollmentWindowsHelloForBusinessConfiguration.pinMaximumLength", |
3551 | 3629 | "label": "Maximum PIN length (4-127)", |
3552 | | - "default": 127 |
| 3630 | + "default": 127, |
| 3631 | + "validators": { |
| 3632 | + "min": { "value": 4, "message": "Minimum value is 4" }, |
| 3633 | + "max": { "value": 127, "message": "Maximum value is 127" } |
| 3634 | + } |
3553 | 3635 | }, |
3554 | 3636 | { |
3555 | 3637 | "type": "autoComplete", |
|
3786 | 3868 | "type": "number", |
3787 | 3869 | "name": "standards.SPFileRequests.expirationDays", |
3788 | 3870 | "label": "Link Expiration 1-730 Days (Optional)", |
3789 | | - "required": false |
| 3871 | + "required": false, |
| 3872 | + "validators": { |
| 3873 | + "min": { "value": 1, "message": "Minimum value is 1" }, |
| 3874 | + "max": { "value": 730, "message": "Maximum value is 730" } |
| 3875 | + } |
3790 | 3876 | } |
3791 | 3877 | ], |
3792 | 3878 | "label": "Set SharePoint and OneDrive File Requests", |
|
3882 | 3968 | { |
3883 | 3969 | "type": "number", |
3884 | 3970 | "name": "standards.SPExternalUserExpiration.Days", |
3885 | | - "label": "Days until expiration (Default 60)" |
| 3971 | + "label": "Days until expiration (Default 60)", |
| 3972 | + "defaultValue": 60, |
| 3973 | + "validators": { |
| 3974 | + "min": { "value": 1, "message": "Minimum value is 1" }, |
| 3975 | + "max": { "value": 730, "message": "Maximum value is 730" } |
| 3976 | + } |
3886 | 3977 | } |
3887 | 3978 | ], |
3888 | 3979 | "label": "Set guest access to expire automatically", |
|
3902 | 3993 | { |
3903 | 3994 | "type": "number", |
3904 | 3995 | "name": "standards.SPEmailAttestation.Days", |
3905 | | - "label": "Require re-authentication every X Days (Default 15)" |
| 3996 | + "label": "Require re-authentication every X Days (Default 15)", |
| 3997 | + "defaultValue": 15, |
| 3998 | + "validators": { |
| 3999 | + "min": { "value": 1, "message": "Minimum value is 1" }, |
| 4000 | + "max": { "value": 365, "message": "Maximum value is 365" } |
| 4001 | + } |
3906 | 4002 | } |
3907 | 4003 | ], |
3908 | 4004 | "label": "Require re-authentication with verification code", |
|
4612 | 4708 | "type": "number", |
4613 | 4709 | "name": "standards.TeamsMeetingRecordingExpiration.ExpirationDays", |
4614 | 4710 | "label": "Recording Expiration Days (e.g., 365)", |
4615 | | - "required": true |
| 4711 | + "required": true, |
| 4712 | + "defaultValue": 120, |
| 4713 | + "validators": { |
| 4714 | + "min": { "value": -1, "message": "Minimum value is -1" }, |
| 4715 | + "max": { "value": 99999, "message": "Maximum value is 99999" } |
| 4716 | + } |
4616 | 4717 | } |
4617 | 4718 | ], |
4618 | 4719 | "label": "Set Teams Meeting Recording Expiration", |
|
4725 | 4826 | "type": "number", |
4726 | 4827 | "name": "standards.AutopilotStatusPage.TimeOutInMinutes", |
4727 | 4828 | "label": "Timeout in minutes", |
4728 | | - "defaultValue": 60 |
| 4829 | + "defaultValue": 60, |
| 4830 | + "validators": { |
| 4831 | + "min": { "value": 1, "message": "Minimum value is 1" }, |
| 4832 | + "max": { "value": 1440, "message": "Maximum value is 1440" } |
| 4833 | + } |
4729 | 4834 | }, |
4730 | 4835 | { |
4731 | 4836 | "type": "textField", |
|
5192 | 5297 | "type": "number", |
5193 | 5298 | "name": "standards.MailboxRecipientLimits.RecipientLimit", |
5194 | 5299 | "label": "Recipient Limit", |
5195 | | - "defaultValue": 500 |
| 5300 | + "defaultValue": 500, |
| 5301 | + "validators": { |
| 5302 | + "min": { "value": 1, "message": "Minimum value is 1" }, |
| 5303 | + "max": { "value": 1000, "message": "Maximum value is 1000" } |
| 5304 | + } |
5196 | 5305 | } |
5197 | 5306 | ], |
5198 | 5307 | "label": "Set Mailbox Recipient Limits", |
|
0 commit comments