Control: Windows machines should meet requirements for 'Security Options - User Account Control'
Description
Windows machines should have the specified Group Policy settings in the category 'Security Options - User Account Control' for mode for admins, behavior of elevation prompt, and virtualizing file and registry write failures. This policy requires that the Guest Configuration prerequisites have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.compute_vm_meet_security_options_user_account_control_requirement_windowsSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.compute_vm_meet_security_options_user_account_control_requirement_windows --shareSQL
This control uses a named query:
select id as resource, 'info' as status, 'Manual verification required.' as reason, display_name as subscriptionfrom azure_subscription;