fix(windows): disable outlook popup and enforce smtp-only email monitoring

windows/deploy-ensemble.ps1

@@ -27,9 +27,19 @@ param(
     [string]$AwHostname,
     [string]$CustomRulesPath,
     [string]$CustomPolicyPath,
+    [ValidateSet('local', 'server')]
+    [string]$PolicyMode = 'local',
+    [bool]$PolicyEngineEnabled = $false,
+    [string]$PolicyEngineHost,
+    [int]$PolicyEnginePort = 5601,
+    [ValidateSet('http', 'https')]
+    [string]$PolicyEngineScheme = 'http',
+    [int]$PolicyRefreshSeconds = 300,
+    [string]$PolicyCachePath,
     [string]$ReportPath,
     [switch]$SkipHardening,
-    [switch]$ValidateAfterDeploy
+    [switch]$ValidateAfterDeploy,
+    [switch]$IntegrationTestEnabled
 )
 
 Set-StrictMode -Version Latest
@@ -74,7 +84,15 @@ if (-not (Test-Path -LiteralPath $deployScript)) {
     -LogonMarkerEnabled $LogonMarkerEnabled `
     -AwHostname $AwHostname `
     -CustomRulesPath $CustomRulesPath `
-    -CustomPolicyPath $CustomPolicyPath
+    -CustomPolicyPath $CustomPolicyPath `
+    -PolicyMode $PolicyMode `
+    -PolicyEngineEnabled $PolicyEngineEnabled `
+    -PolicyEngineHost $PolicyEngineHost `
+    -PolicyEnginePort $PolicyEnginePort `
+    -PolicyEngineScheme $PolicyEngineScheme `
+    -PolicyRefreshSeconds $PolicyRefreshSeconds `
+    -PolicyCachePath $PolicyCachePath `
+    -IntegrationTestEnabled:$IntegrationTestEnabled
 
 if (-not $SkipHardening) {
     & $hardeningScript `