ScriptShare

This script fixes the windows CIS Benchmark check 18.9.36.1: "Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.9.47.5.1: "Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.9.47.11.1: "Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.9.49.1: "Ensure 'Turn off the advertising ID' is set to 'Enabled'."

The script checks if it is running with administrative privileges, creates the necessary registry key if it does not exist, sets the "DisabledByGroupPolicy" DWORD value to 1 under the specified path, and then verifies that the value is correctly set. If the value is set as required, it reports a pass; otherwise, it reports a failure.

Notes

• This script must be run as an Administrator.
• It directly modifies the registry, which is equivalent to enabling the Group Policy setting.
• Use with caution, as registry changes can have system-wide effects.

This script fixes the windows CIS Benchmark check 18.9.51.1.1: "Ensure 'Enable Windows NTP Client' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.3.2: "Ensure 'Prevent non-admin users from installing packaged Windows apps' is set to 'Enabled'."

The script checks and sets the registry key at HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx\BlockNonAdminUserInstall to 1 (Enabled). It includes error handling and verification to confirm the setting is applied correctly.

This script fixes the windows CIS Benchmark check 18.10.4.1: "Ensure 'Let Windows apps activate with voice while the system is locked' is set to 'Enabled: Force Deny'."

This script fixes the windows CIS Benchmark check 18.10.5.1: "Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.5.2: "Ensure 'Block launching Universal Windows apps with Windows Runtime API access from hosted content.' is set to 'Enabled'."

The script ensures the registry value is set to 'Enabled' (value 1) and verifies the change. It follows the principle of least privilege by requiring administrator rights.

This script fixes the windows CIS Benchmark check 18.10.7.1: "Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'."