ScriptShare

This script fixes the windows CIS Benchmark check 18.9.47.11.1: "Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.9.49.1: "Ensure 'Turn off the advertising ID' is set to 'Enabled'."

The script checks if it is running with administrative privileges, creates the necessary registry key if it does not exist, sets the "DisabledByGroupPolicy" DWORD value to 1 under the specified path, and then verifies that the value is correctly set. If the value is set as required, it reports a pass; otherwise, it reports a failure.

Notes

• This script must be run as an Administrator.
• It directly modifies the registry, which is equivalent to enabling the Group Policy setting.
• Use with caution, as registry changes can have system-wide effects.

This script fixes the windows CIS Benchmark check 18.9.51.1.1: "Ensure 'Enable Windows NTP Client' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.3.2: "Ensure 'Prevent non-admin users from installing packaged Windows apps' is set to 'Enabled'."

The script checks and sets the registry key at HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx\BlockNonAdminUserInstall to 1 (Enabled). It includes error handling and verification to confirm the setting is applied correctly.

This script fixes the windows CIS Benchmark check 18.10.4.1: "Ensure 'Let Windows apps activate with voice while the system is locked' is set to 'Enabled: Force Deny'."

This script fixes the windows CIS Benchmark check 18.10.5.1: "Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.5.2: "Ensure 'Block launching Universal Windows apps with Windows Runtime API access from hosted content.' is set to 'Enabled'."

The script ensures the registry value is set to 'Enabled' (value 1) and verifies the change. It follows the principle of least privilege by requiring administrator rights.

This script fixes the windows CIS Benchmark check 18.10.7.1: "Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.7.2: "Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'."

This script fixes the windows CIS Benchmark check 18.10.8.1.1: "Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'."

The script ensures that the registry key for enhanced anti-spoofing is set to enabled (value 1). It first checks if the script is running with administrative privileges, then sets the registry value, and finally verifies that the value is correctly applied.

Notes

• This script is intended for Windows 10 and later versions.
• It modifies the registry directly; use Group Policy if available for production environments.
• Ensure you have the necessary permissions and understand the implications of changing registry settings.