Maester 
MP.JL.CISW11INT.L1.242 Impersonate Client is set to *S-1-5-32-544, *S-1-5-19, *S-1-5-20, *S-1-5-6, *S-1-5-99
Description
CIS Microsoft Intune for Windows 11 Benchmark, recommendation 90.20 (Level 1).
The test passes when an assigned settings catalog policy for Windows sets User Rights > Impersonate Client to a value that is in *S-1-5-32-544, *S-1-5-19, *S-1-5-20, *S-1-5-6, *S-1-5-99, and no other assigned policy sets it to something else.
Remediation action
- In the Microsoft Intune admin center, go to Devices > Configuration and open (or create) a settings catalog policy for Windows 10 and later.
- Add User Rights > Impersonate Client and set it to a value that is
in*S-1-5-32-544, *S-1-5-19, *S-1-5-20, *S-1-5-6, *S-1-5-99. - Assign the policy to your Windows devices, and remove any other assigned policy that sets it to something else.
Related links
%TestResult%