This script fixes the windows CIS Benchmark check 18.9.20.1.12: "Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.9.20.1.13: "Ensure 'Turn off Windows Customer Experience Improvement Program' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.9.20.1.14: "Ensure 'Turn off Windows Error Reporting' is set to 'Enabled'."

The script creates or modifies the registry key to set 'Turn off Windows Error Reporting' to enabled (which disables error reporting). It then verifies the registry value to confirm the setting is correct.

This script fixes the windows CIS Benchmark check 18.9.24.1: "Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'."

This script fixes the windows CIS Benchmark check 18.9.25.1: "Ensure 'Configure password backup directory' is set to 'Enabled: Active Directory' or 'Enabled: Azure Active Directory'."

This script fixes the windows CIS Benchmark check 18.9.25.2: "Ensure 'Do not allow password expiration time longer than required by policy' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.9.25.3: "Ensure 'Enable password encryption' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.9.25.4: "Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters'."

The script modifies the registry to enable password complexity with large letters, small letters, numbers, and special characters (value 4) under the LAPS policy path. It then verifies that the setting is correctly applied.

Notes

• This script assumes LAPS is installed, as the registry path is specific to LAPS.
• Direct registry modification may be overwritten by Group Policy settings. Use this script for testing or when GPO is not in use.
• Compatible with PowerShell 5.1.

This script fixes the windows CIS Benchmark check 18.9.25.5: "Ensure 'Password Settings: Password Length' is set to 'Enabled: 15 or more'."

This script fixes the windows CIS Benchmark check 18.9.25.6: "Ensure 'Password Settings: Password Age (Days)' is set to 'Enabled: 30 or fewer'."