Search Results
byago
byago
byago
byago
byago
This script fixes the windows CIS Benchmark check 18.10.7.3: "Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'."
This script fixes the windows CIS Benchmark check 18.10.9.1.6: "Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'."
This script fixes the windows CIS Benchmark check 18.10.9.1.8: "Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Configure storage of BitLocker recovery information to AD DS' is set to 'Enabled: Backup recovery passwords and key packages'."
This script fixes the windows CIS Benchmark check 18.10.9.1.9: "Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives' is set to 'Enabled: False'."
This script fixes the windows CIS Benchmark check 18.10.9.1.10: "Ensure 'Configure use of hardware-based encryption for fixed data drives' is set to 'Disabled'."
This script fixes the windows CIS Benchmark check 18.10.9.1.11: "Ensure 'Configure use of passwords for fixed data drives' is set to 'Disabled'."
This script fixes the windows CIS Benchmark check 18.10.9.1.12: "Ensure 'Configure use of smart cards on fixed data drives' is set to 'Enabled'."
This script fixes the windows CIS Benchmark check 18.10.9.1.13: "Ensure 'Configure use of smart cards on fixed data drives: Require use of smart cards on fixed data drives' is set to 'Enabled: True'."
This script fixes the windows CIS Benchmark check 18.10.9.2.2: "Ensure 'Allow Secure Boot for integrity validation' is set to 'Enabled'."
This script fixes the windows CIS Benchmark check 18.10.9.2.5: "Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Password' is set to 'Enabled: Require 48-digit recovery password'."
The script checks and sets the registry key for BitLocker operating system drive recovery to require a 48-digit password. It handles creation of the registry key if it does not exist and verifies the setting after modification.