Domain users for PSMConnect & PSMAdminConnect

[kyrios123]

Summary

The script assumes that PSMConnect and PSMAdminConnect local users are used while domain users configured

Steps to Reproduce

Run the script .\Main.ps1 -Verbose -Debug as explained in the doc
Check the SID of these users in the log file -> they corresponds to the PSMConnect & PSMAdminConnect local users instead of the domain accounts configured.

Expected Results

The domain accounts must be used instead of the default local users

Actual Results

Logs show the following message

2024-07-29 08:13:31]	[INFO]	Start verify DisableTheScreenSaverForThePSMLocalUsers
[2024-07-29 08:13:31]	[DEBUG]	Get SID value for user: PSMConnect
[2024-07-29 08:13:31]	[DEBUG]	User SID: S-1-5-21-1967969204-1792391139-511700813-1005
[2024-07-29 08:13:31]	[VERBOSE]	Starting Compare-PolicyEntry (Disable screen saver,C:\WINDOWS\system32\GroupPolicyUsers\S-1-5-21-1967969204-1792391139-511700813-1005\User\registry.pol,Software\Policies\Microsoft\Windows\Control Panel\Desktop,ScreenSaveActive,1)
[2024-07-29 08:13:31]	[VERBOSE]	Opening Key:'Software\Policies\Microsoft\Windows\Control Panel\Desktop' on Hive:'HKLM:'
[2024-07-29 08:13:31]	[ERROR]	Error comparing local group policy 'Disable screen saver'. Error: Source:; Message: Get-Reg: Registry path HKLM:\Software\Policies\Microsoft\Windows\Control Panel\Desktop does not exist
[2024-07-29 08:13:31]	[DEBUG]	Get SID value for user: PSMAdminConnect
[2024-07-29 08:13:31]	[DEBUG]	User SID: S-1-5-21-1967969204-1792391139-511700813-1006
[2024-07-29 08:13:31]	[VERBOSE]	Starting Compare-PolicyEntry (Disable screen saver,C:\WINDOWS\system32\GroupPolicyUsers\S-1-5-21-1967969204-1792391139-511700813-1006\User\registry.pol,Software\Policies\Microsoft\Windows\Control Panel\Desktop,ScreenSaveActive,1)
[2024-07-29 08:13:31]	[VERBOSE]	Opening Key:'Software\Policies\Microsoft\Windows\Control Panel\Desktop' on Hive:'HKLM:'
[2024-07-29 08:13:31]	[ERROR]	Error comparing local group policy 'Disable screen saver'. Error: Source:; Message: Get-Reg: Registry path HKLM:\Software\Policies\Microsoft\Windows\Control Panel\Desktop does not exist
[2024-07-29 08:13:31]	[INFO]	Finish verify DisableTheScreenSaverForThePSMLocalUsers

Reproducible

• Always
• Sometimes
• Non-Reproducible

Version/Tag number

• CYBRHardeningCheck-v3.2
• PSM v12.6.7 on Windows Server 2019 Standard

Environment setup

PSM is running on a VM

Additional Information

N/A