ScriptShare

This script fixes the windows CIS Benchmark check 18.10.75.1.4: "Ensure 'Notify Unsafe App' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.75.1.5: "Ensure 'Service Enabled' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.75.2.1: "Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'."

This script fixes the windows CIS Benchmark check 18.10.77.1: "Ensure 'Enables or disables Windows Game Recording and Broadcasting' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.10.79.1: "Ensure 'Allow suggested apps in Windows Ink Workspace' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.10.79.2: "Ensure 'Allow Windows Ink Workspace' is set to 'Enabled: On, but disallow access above lock' OR 'Enabled: Disabled'."

This script fixes the windows CIS Benchmark check 18.10.81.1: "Ensure 'Enable MPR notifications for the system' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.10.81.2: "Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.10.86.2: "Ensure 'Turn on PowerShell Transcription' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.88.1.3: "Ensure 'Disallow Digest authentication' is set to 'Enabled'."

The script ensures that the registry key for WinRM Client is configured to disallow Digest authentication by setting the 'AllowDigest' value to 0. It then verifies the setting to confirm the CIS check passes.

Notes

• This script must be run with administrative privileges.
• It modifies the registry, so use with caution.