Adobe

Adobe

A composite DSC resource to manage Adobe STIG settings

Requirements

An Adobe product installed.

Syntax

Adobe [String] #ResourceName
{
    [DependsOn               = [String[]]]
    [PsDscRunAsCredential    = [PSCredential]]
    AdobeApp                 = [String]
    [StigVersion             = [Version]]
    [Exception               = [Hashtable]]
    [OrgSettings             = [Object]]
    [SkipRule                = [String[]]]
    [SkipRuleType            = [String[]]]
    [SkipRuleSeverity        = [String[]]]
}

We can see above the AdobeApp parameter is REQUIRED (not surrounded by []) while all other parameters are optional. Here is the minimal configuration given the above syntax

Configuration myConfig
{
    Import-DscResource -Name Adobe
    Adobe AdobeBaseline
    {
        AdobeApp = 'AcrobatReader'
    }
}

myConfig # calls the configuration above that creates the output structure

the node {} block of a PowerShell DSC v2 Configuration is optional.  When ommited, DSC implicitly injects a node named localhost.

Compiled output structure
myConfig/   (directory name derived from the configuration name)
└─ localhost.mof   (implicitly generated localhost when the Node block is omitted)

Adding the PowerStig version assists in determining if/when upgrades are needed

Configuration myConfig
{
    Import-DscResource -Name Adobe
    Adobe AdobeBaseline
    {
        AdobeApp    = 'AcrobatReader'
        StigVersion = [Version]'2.1'
    }
}

A more complete example, including optional organizational settings. For more information on organization settings see Organizational Settings

in this example you populare the $MyOrgAdobeSettings hashtable prior to using the variable in the configuration. A typical example would be

$MyOrgAdobeSettings = @{
    
}
Configuration myConfig
{
    Import-DscResource -Name Adobe
    Adobe AdobeBaseline
    {
        AdobeApp    = 'AcrobatReader'
        StigVersion = [Version]'2.1'
        OrgSettings = $MyOrgAdobeSettings
        SkipRule    = @('ADOBE-00-000001')
    }
}
    Adobe AdobeBaseline {
        AdobeApp    = 'AcrobatReader'
        StigVersion = [Version]'1.6'
        OrgSettings = $MyOrgAdobeSettings
        SkipRule    = @('ADOBE-00-000001')
    }

To get a list of applicable values for the AdobeApp paremter run the following:

Import-Module PowerSTIG
Get-Stig -ListAvailable | Where-Object Technology -like '*Adobe*'

example output

Technology        : Adobe
TechnologyVersion : AcrobatPro
TechnologyRole    : 
Version           : 2.1
RuleList          : {}

Technology        : Adobe
TechnologyVersion : AcrobatReader
TechnologyRole    : 
Version           : 1.6
RuleList          : {}

Technology        : Adobe
TechnologyVersion : AcrobatReader
TechnologyRole    : 
Version           : 2.1
RuleList          : {}