The Install-DSC application is provided to close gaps for STIG compliance where settings are not available in Intune. 

The Install-DSC.intunewin can be uploaded as a win32 application for deployment. 

The DSC app source files are provided for reference or if additions are desired. If the intunewin file is not present in the source files, you'll need to compile the intunewin yourself.

This application should have system installation behavior.

This application should work on systems with WDAC and PowerShell constrained language mode enabled

Install command: %windir%\sysnative\WindowsPowerShell\v1.0\powershell.exe -Windowstyle Hidden -NoProfile -ExecutionPolicy Bypass -Command "&{.\Install-DSC.ps1}"

Please note that there is no uninstallation for this. Simply copy the install command for the required uninstall command when configuring the win32 application. 

Detection Method: Manually Configure Detection Rules
	Rule Type: Registry
	Path: HKEY_LOCAL_MACHINE\Software\DisaSTIG
	ValueName: DSCVersion
	Detection Method: String Comparison
	Value: 4.0
	Associate with 32 bit app: no

