Lesson 6 changes

Author: markkenny

lib/macos/configuration-profiles/disable-bluetooth-file-sharing.mobileconfig

@@ -0,0 +1,60 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+
+	<key>PayloadDescription</key>
+	<string>This profile configuration is designed to apply the CIS Benchmark for macOS 10.14 (v2.0.0), 10.15 (v2.0.0), 11.0 (v2.0.0), and 12.0 (v1.0.0)</string>
+	<key>PayloadDisplayName</key>
+	<string>Disable Bluetooth sharing</string>
+	<key>PayloadEnabled</key>
+	<true/>
+	<key>PayloadIdentifier</key>
+	<string>cis.macOSBenchmark.section2.BluetoothSharing</string>
+	<key>PayloadScope</key>
+	<string>System</string>
+	<key>PayloadType</key>
+	<string>Configuration</string>
+	<key>PayloadUUID</key>
+	<string>5CEBD712-28EB-432B-84C7-AA28A5A383D8</string>
+	<key>PayloadVersion</key>
+	<integer>1</integer>
+    <key>PayloadRemovalDisallowed</key>
+    <true/>
+	<key>PayloadContent</key>
+	<array>
+		<dict>
+			<key>PayloadContent</key>
+			<dict>
+				<key>com.apple.Bluetooth</key>
+				<dict>
+					<key>Forced</key>
+					<array>
+						<dict>
+							<key>mcx_preference_settings</key>
+							<dict>
+								<key>PrefKeyServicesEnabled</key>
+								<false/>
+							</dict>
+						</dict>
+					</array>
+				</dict>
+			</dict>
+			<key>PayloadDescription</key>
+			<string>Disables Bluetooth Sharing</string>
+			<key>PayloadDisplayName</key>
+			<string>Custom</string>
+			<key>PayloadEnabled</key>
+			<true/>
+			<key>PayloadIdentifier</key>
+			<string>0240DD1C-70DC-4766-9018-04322BFEEAD1</string>
+			<key>PayloadType</key>
+			<string>com.apple.ManagedClient.preferences</string>
+			<key>PayloadUUID</key>
+			<string>0240DD1C-70DC-4766-9018-04322BFEEAD1</string>
+			<key>PayloadVersion</key>
+			<integer>1</integer>
+		</dict>
+	</array>
+</dict>
+</plist>

lib/windows/scripts/set-wallpaper.ps1

@@ -0,0 +1,5 @@
+$WallpaperPath = "C:\Path\To\Your\Image.jpg"
+$RegistryPath = "HKCU:\Control Panel\Desktop"
+
+Set-ItemProperty -Path $RegistryPath -Name Wallpaper -Value $WallpaperPath
+RUNDLL32.EXE user32.dll, UpdatePerUserSystemParameters

teams/engineering.yml

@@ -15,8 +15,15 @@ queries:
 agent_options:
   path: ../lib/agent-options.yml
 controls:
+  enable_disk_encryption: true
+  ipados_updates:
+    deadline: "2025-12-31"
+    minimum_version: "26.0"
   scripts:
     - path: ../lib/macos/scripts/remove-zoom-artifacts.script.sh
+  macos_settings:
+    custom_settings:
+    - path: ../lib/macos/configuration-profiles/disable-bluetooth-file-sharing.mobileconfig
 team_settings:
   secrets:
     - secret: "$FLEET_ENGINEERING_ENROLL_SECRET"

teams/new-hires.yml

@@ -18,6 +18,14 @@ agent_options:
 controls:
   scripts:
     - path: ../lib/macos/scripts/set-timezone.script.sh
+    - path: ../lib/windows/scripts/set-wallpaper.ps1
+  macos_settings:
+    custom_settings:
+    - path: ../lib/macos/configuration-profiles/disable-bluetooth-file-sharing.mobileconfig
+    - path: ../lib/macos/configuration-profiles/passcode-settings-ddm.json
+  macos_updates:
+    deadline: "2025-10-31"
+    minimum_version: "26.0"
 team_settings:
   secrets:
     - secret: "$FLEET_NEW_HIRES_ENROLL_SECRET"