ScriptShare

This script fixes the windows CIS Benchmark check 18.10.7.2: "Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'."

This script fixes the windows CIS Benchmark check 18.10.8.1.1: "Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'."

The script ensures that the registry key for enhanced anti-spoofing is set to enabled (value 1). It first checks if the script is running with administrative privileges, then sets the registry value, and finally verifies that the value is correctly applied.

Notes

• This script is intended for Windows 10 and later versions.
• It modifies the registry directly; use Group Policy if available for production environments.
• Ensure you have the necessary permissions and understand the implications of changing registry settings.

This script fixes the windows CIS Benchmark check 18.10.7.3: "Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'."

This script fixes the windows CIS Benchmark check 18.10.9.1.6: "Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'."

This script fixes the windows CIS Benchmark check 18.10.9.1.8: "Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Configure storage of BitLocker recovery information to AD DS' is set to 'Enabled: Backup recovery passwords and key packages'."

This script fixes the windows CIS Benchmark check 18.10.9.1.9: "Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives' is set to 'Enabled: False'."

This script fixes the windows CIS Benchmark check 18.10.9.1.10: "Ensure 'Configure use of hardware-based encryption for fixed data drives' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.10.9.1.11: "Ensure 'Configure use of passwords for fixed data drives' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.10.9.1.12: "Ensure 'Configure use of smart cards on fixed data drives' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.9.1.13: "Ensure 'Configure use of smart cards on fixed data drives: Require use of smart cards on fixed data drives' is set to 'Enabled: True'."