ScriptShare

This script fixes the windows CIS Benchmark check 18.10.28.2: "Ensure 'Turn off account-based insights, recent, favorite, and recommended files in File Explorer' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.36.1: "Ensure 'Turn off location' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.40.1: "Ensure 'Allow Message Service Cloud Sync' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.10.41.1: "Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.42.6.1.1: "Ensure 'Configure Attack Surface Reduction rules' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.42.6.1.2: "Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured."

Notes

• Silent, idempotent, no UI. • Tested while running as SYSTEM under NinjaRMM.

This script fixes the windows CIS Benchmark check 18.10.42.6.3.1: "Ensure 'Prevent users and apps from accessing dangerous websites' is set to 'Enabled: Block'."

This script fixes the windows CIS Benchmark check 18.10.42.7.1: "Ensure 'Enable file hash computation feature' is set to 'Enabled'."

The script checks for administrative privileges, creates the necessary registry key if it does not exist, sets the 'EnableFileHashComputation' DWORD value to 1, and verifies the change to confirm the setting is applied correctly.

Notes

• This script must be run with administrative privileges.
• It modifies the registry directly, which may override Group Policy settings.
• Compatible with PowerShell 5.1 and later.

This script fixes the windows CIS Benchmark check 18.10.42.12.1: "Ensure 'Configure Watson events' is set to 'Disabled'."

This function modifies the registry to ensure 'Configure Watson events' is disabled as per CIS benchmark requirements. It creates the registry key if it does not exist, sets the specified value, and then verifies that the value is correctly set.

Example(s)

Set-CisWatsonEventsDisabled

This script fixes the windows CIS Benchmark check 18.10.42.13.2: "Ensure 'Scan removable drives' is set to 'Enabled'."