Assume your company requires all machines to adhere to the following four items:
Users are required to use Ctrl + Alt + Delete to log in
The local guest account must be disabled
The Internet Connection Sharing service must be disabled
A recent antivirus definition file
Each of these settings can be verified with a single CI returning a single compliant or noncompliant state, or each setting can get its own CI and return a state for each setting. The latter generates more state messages, but it can provide more detail in reporting. In this scenario, we'll just put all these settings into a single CI.
Create a text file called virus.def in the Windows\Temp folder of the computer running the CM admin console. You can replace this file and location with the correct file of your company's antivirus definition file as needed in the following How to do it... section.