ScriptShare

This script fixes the windows CIS Benchmark check 18.10.56.3.9.3: "Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'."

This script fixes the windows CIS Benchmark check 18.10.56.3.10.1: "Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less, but not Never (0)'."

This script fixes the windows CIS Benchmark check 18.10.56.3.10.2: "Ensure 'Set time limit for disconnected sessions' is set to 'Enabled: 1 minute'."

This script fixes the windows CIS Benchmark check 18.10.57.1: "Ensure 'Prevent downloading of enclosures' is set to 'Enabled'."

The script ensures the registry key at HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds\DisableEnclosureDownload is set to 1 (Enabled). It also verifies the setting after application.

This script fixes the windows CIS Benchmark check 18.10.58.2: "Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'."

This script fixes the windows CIS Benchmark check 18.10.58.4: "Ensure 'Allow Cortana above lock screen' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.10.58.6: "Ensure 'Allow search and Cortana to use location' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.10.58.7: "Ensure 'Allow search highlights' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.10.62.1: "Ensure 'Turn off KMS Client Online AVS Validation' is set to 'Enabled'."

The script ensures the registry key 'NoGenTicket' is set to 1 under the path HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform. It handles key creation if it does not exist and includes error handling and verification.

This script fixes the windows CIS Benchmark check 18.10.65.1: "Ensure 'Disable all apps from Microsoft Store' is set to 'Disabled'."