The Crowdstrike Deployment script on their github didn't work for me. Built this script to deploy out CrowdStrike across an MSP's Customers. Let me know if it works for you!
This script fixes the Windows CIS Benchmark check 18.1.2.2: "Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'."
Disables AD user accounts inactive beyond a threshold, using a last-logon value reconciled across every domain controller. Honours -WhatIf / -Confirm.
https://www.navanem.com/scripts/powershell-disable-inactive-ad-accounts
Creates a local administrator account if it does not already exist.
https://www.navanem.com/scripts/powershell-create-local-admin-account
This script fixes the Windows CIS Benchmark check 17.5.5: "Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'."
This script fixes the Windows CIS Benchmark check 18.1.1.1: "Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'."
This script fixes the vulnerability CVE-2025-15556 affecting Notepad++ (64-bit x64) version 8.7 on Windows
Creates a "No Sleep" mode for windows machines so its always on and connected
This script fixes the Windows CIS Benchmark check 18.10.9.2.1: "Ensure 'Allow enhanced PINs for startup' is set to 'Enabled'."