ScriptShare

This script fixes the windows CIS Benchmark check 18.9.26.1: "Ensure 'Allow Custom SSPs and APs to be loaded into LSASS' is set to 'Disabled'."

The script checks if it is running with administrative privileges, sets the registry key to disable custom SSPs and APs, and then verifies that the setting is correctly applied. This addresses the CIS recommendation by ensuring the registry value is set to 0 (Disabled).

Notes

• This script must be run as an Administrator.
• It is compatible with PowerShell 5.1 and later.
• Modifying registry settings can have security implications; use with caution and ensure proper backups.