One-Click Actions for Baseline Rules
Table of Contents
Syncro provides two one-click actions for resolving failed security baseline rules: remediation and ticketing.
One-Click Remediation deploys industry best practices to fix security gaps directly within Syncro, reducing manual effort and minimizing the window of vulnerability. One-Click Ticketing converts failed rules into service tickets, ensuring remediation work is captured, tracked, and documented within your workflow.
Watch this short video to learn more:
One-Click Remediation
One-Click Remediation allows you to fix failed security baseline rules directly within Syncro, reducing manual effort and minimizing the window of vulnerability.
For step-by-step instructions, see Remediate a Single Rule and Remediate Multiple Rules.
Overview
One-Click Remediation deploys industry best practices to address security gaps without leaving the Syncro dashboard. Not all baseline rules support this action; those that do are identified by the "Automated" status in the Remediation column of the (Tenant) Compliance Details Page.
Remediation & Status Columns
Automated Column
The Remediation column on the (Tenant) Compliance Details Page indicates which action is available for each rule. Rules that display "Automated" support One-Click Remediation. Rules that display "Manual" support ticketing only.
Remediating Status
When remediation is in progress, the rule status changes to "Remediating." This can take several minutes. Once complete, the status may show as "Reassessing" for up to an hour while changes sync with Microsoft and the system re-verifies compliance.
Notes
- Any Syncro User can initiate remediation of failed rules.
- Checkboxes on the (Tenant) Compliance Details Page are only enabled for rules with a "Failed" status.
Remediate a Single Rule
Use this procedure to remediate a single failed baseline rule from its Rule Details panel.
Prerequisites
The rule must have an "Automated" status in the Remediation column. For background, see One-Click Remediation.
Steps
- Navigate to the (Tenant) Compliance Details Page and open the rule you want to remediate.
- In the Rule Details panel, click Remediate. A notification confirms whether remediation started successfully or failed.
Result
The rule status changes to "Remediating." Once complete, the status may show as "Reassessing" for up to an hour.
Remediate Multiple Rules
Use this procedure to remediate multiple failed baseline rules at once from the (Tenant) Compliance Details Page.
Prerequisites
The rules must have an "Automated" status in the Remediation column and a "Failed" status. For background, see One-Click Remediation.
Steps
- Navigate to the (Tenant) Compliance Details Page.
- Check the boxes next to one or more rules labeled “Automated.”
- Click Manage and select “Remediate” from the Bulk Rule Actions section. A notification confirms whether remediation started successfully or failed.
Result
The affected rules show a status of "Remediating." Once complete, the status may show as "Reassessing" for up to an hour.
One-Click Ticketing
One-Click Ticketing converts failed or errored baseline rules into service tickets, ensuring remediation work is captured, tracked, and documented within your workflow.
For step-by-step instructions, see Create a Ticket for a Single Rule and Create Tickets for Multiple Rules.
Overview
One-Click Ticketing is available for all baseline rules. When you create a ticket from a failed rule, the system automatically populates it with the rule details and remediation instructions, giving your team a complete record of the security action.
Prevention of Duplicate Tickets
If a ticket already exists for a rule you selected, the system prompts you before creating duplicates. The prompt varies based on how many rules you selected:
-
Single rule: The "Create Additional Ticket?" dialog appears, identifying the existing ticket and asking whether to skip it or proceed:
-
Multiple rules: The "Tickets Already Exist for Some Selected Rules" dialog appears, listing all rules with existing tickets and asking whether to skip those rules or proceed with the remaining selections:
Notes
- Any Syncro User can initiate the ticketing process.
- Checkboxes on the (Tenant) Compliance Details Page are only enabled for rules with a "Failed" status.
Create a Ticket for a Single Rule
Use this procedure to generate a service ticket from a single failed or errored baseline rule.
Prerequisites
For background on this feature, see One-Click Ticketing.
Steps
- Navigate to the (Tenant) Compliance Details Page and click on the rule you want to ticket.
- In the Rule Details panel, click Create Ticket. The ticket creation dialog appears:
- Select the Customer Organization and provide an Issue Type.
- Review the Ticket Title/Subject, which defaults to "Remediate: [Rule Name]," and the pre-filled Issue Description. Edit either field if needed.
Tip: Click Clear All to remove all values from the text fields. - Review the "Email the Customer Organization" checkbox. It defaults based on your existing settings.
- Keep the "View Ticket in a New Tab" checkbox selected to open the new ticket in a separate tab after creation.
- Click Create.
Result
The system creates the ticket and automatically populates it with:
- A public ticket communication describing the initial issue.
- A private ticket communication that includes a link to the Rule Details, plus the rule name, Syncro Tenant, baseline, and remediation instructions.
If the “View Tickets in a New Tab” checkbox was selected, the Ticket's Details Page opens in a new browser tab.
Create Tickets for Multiple Rules
Use this procedure to generate service tickets from multiple failed or errored baseline rules at once.
Prerequisites
For background on this feature, see One-Click Ticketing.
Steps
- Navigate to the (Tenant) Compliance Details Page.
- Check the boxes next to one or more failed rules.
- Click Manage and select “Create Tickets” from the Bulk Rule Actions section. The ticket creation dialog appears:
- Select the Customer Organization and provide an Issue Type. The system uses "Remediate: [Rule Name]" for each ticket's title.
- Review the "Email the Customer Organization" checkbox. It defaults based on your existing settings.
- Keep the "View Tickets in a New Tab" checkbox selected to open Tickets tab/page in a separate tab after creation.
- Click Create.
Result
The system creates a ticket for each selected rule and automatically populates each with:
- A public ticket communication describing the initial issue.
- A private ticket communication that includes a link to the Rule Details, plus the rule name, Syncro Tenant, baseline, and remediation instructions.
If the “View Tickets in a New Tab” checkbox was selected, the Tickets tab/page opens in a new browser tab.