ScriptShare

This script fixes the windows CIS Benchmark check 18.6.21.2: "Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled'."

The script modifies the registry to enable the setting by setting the fBlockNonDomain value to 1 under the specified path. It then verifies that the value is correctly set. If the registry key does not exist, it is created.

Notes

• This script must be run with administrative privileges.
• Directly modifying the registry may be overridden by Group Policy if it is managing this setting.
• No reboot is typically required, but changes may not take effect until the user logs off and on or the policy is refreshed.