05-29-2023 03:56 PM
Howdy Guys,
been doing some troubleshooting, and it turns out that Windows 11, in the registry, still actually reports itself as Windows 10 Enterprise, just with a difference Version Number.
So we currently have Posture policy which is set for Win 10 only, but it is being applied to Windows 11 devices and causing issues, as the Firewall check fails and a couple of other requirements.
Is there a way that we can check somewhere, the registry attribute for Windows build version number to ensure that Win 11 does NOT get the posture settings applied? if that makes sense?
Profiling is good, they get set there correctly, but when being postured they are falling into the Win 10 (all) OS selection
We are running ISE 3.0 Patch 6
Solved! Go to Solution.
05-29-2023 07:46 PM
If the Win11 PCs are correctly being profiled as Windows11-Workstation, you might try the following.
1. Navigate to Policy > Profiling > Logical Profiles and create a new Logical Profile that matches on the Windows11-Workstation policy (e.g. 'Windows11 Devices')
2. In your Posture policy rule, select the Other Conditions drop-down and select Create New Condition. Define the condition as 'Endpoints:LogicalProfile NOT_EQUALS Windows11 Devices'
This should prevent your profiled Win11 PCs from hitting the rule.
05-29-2023 07:46 PM
If the Win11 PCs are correctly being profiled as Windows11-Workstation, you might try the following.
1. Navigate to Policy > Profiling > Logical Profiles and create a new Logical Profile that matches on the Windows11-Workstation policy (e.g. 'Windows11 Devices')
2. In your Posture policy rule, select the Other Conditions drop-down and select Create New Condition. Define the condition as 'Endpoints:LogicalProfile NOT_EQUALS Windows11 Devices'
This should prevent your profiled Win11 PCs from hitting the rule.
08-22-2023 02:12 AM
Dear Greg Gibbs
I have same issue but I didn't find the Windows 11 policy to match it with the logical profile do you have any advice?
08-22-2023 05:15 PM
@mohamed orabi , you should ensure you have a current profiler feed update from the Feed Service
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide