Those with “clean” systems may not see the need, but I’m trying to bring out-in-the-wild systems under the compliance umbrella without having to re-image every one.
I would like the capability to display (at logon) a free-form message to the current user if the system contains any unauthorized software. For example, “This system contains unapproved software. Please see your system administrator for corrective action,” and then a "Ok" button so the user logon can continue.
That's the first iteration of this concept.
The second is to add a countdown clock to advise the user the system will be disabled if not compliant in
x number of days.