ScriptShare

This script fixes the windows CIS Benchmark check 18.10.25.3.2: "Ensure 'Setup: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'."

This script fixes the windows CIS Benchmark check 18.10.25.4.2: "Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'."

This script fixes the windows CIS Benchmark check 18.10.28.2: "Ensure 'Turn off account-based insights, recent, favorite, and recommended files in File Explorer' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.36.1: "Ensure 'Turn off location' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.40.1: "Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.10.41.1: "Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.42.6.1.1: "Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.42.6.1.2: "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured."

Notes

• Silent, idempotent, no UI. • Tested while running as SYSTEM under NinjaRMM.

This script fixes the windows CIS Benchmark check 18.10.42.6.3.1: "Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'."

This script fixes the windows CIS Benchmark check 18.10.42.7.1: "Ensure 'Enable file hash computation feature' is set to 'Enabled'."

The script checks for administrative privileges, creates the necessary registry key if it does not exist, sets the 'EnableFileHashComputation' DWORD value to 1, and verifies the change to confirm the setting is applied correctly.

Notes

• This script must be run with administrative privileges.
• It modifies the registry directly, which may override Group Policy settings.
• Compatible with PowerShell 5.1 and later.