ScriptShare

This script fixes the windows CIS Benchmark check 18.9.25.4: "Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters'."

The script modifies the registry to enable password complexity with large letters, small letters, numbers, and special characters (value 4) under the LAPS policy path. It then verifies that the setting is correctly applied.

Notes

• This script assumes LAPS is installed, as the registry path is specific to LAPS.
• Direct registry modification may be overwritten by Group Policy settings. Use this script for testing or when GPO is not in use.
• Compatible with PowerShell 5.1.