ScriptShare

This script fixes the windows CIS Benchmark check 2.3.7.7: "Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'."

The script verifies the current value of the CachedLogonsCount registry key under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon. If the value is greater than 4 or does not exist, it sets it to 4. After modification, it verifies the setting and reports the compliance status.

Parameters

Verbose Use this switch to enable verbose output for detailed logging.

Notes

• This script must be run with administrative privileges.
• It is designed to be idempotent, meaning it only makes changes if necessary and always verifies the result.