This script fixes the windows CIS Benchmark check 17.9.1: "Ensure 'Audit IPsec Driver' is set to 'Success and Failure'."

This script fixes the windows CIS Benchmark check 17.9.4: "Ensure 'Audit Security System Extension' is set to include 'Success'."

This script fixes the windows CIS Benchmark check 18.1.1.2: "Ensure 'Prevent enabling lock screen slide show' is set to 'Enabled'."

The script modifies the Windows registry to set the 'NoLockScreenSlideshow' DWORD value to 1 under the specified path. It includes error handling and automatic verification to ensure the CIS check passes.

This script fixes the windows CIS Benchmark check 18.4.5: "Ensure 'Enable Certificate Padding' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.4.6: "Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'."

The script checks for administrative privileges, sets the registry value for DisableExceptionChainValidation to 0 under the specified path, and then verifies that the value is correctly set. This addresses the CIS benchmark requirement for SEHOP.

Parameters

None This script does not accept parameters. It is designed to be run as-is.

Notes

• This script must be run with administrative privileges.
• A system reboot may be required for the changes to take effect.
• This script modifies the registry directly. Use with caution and ensure it aligns with your organization's policies.

This script fixes the windows CIS Benchmark check 18.4.7: "Ensure 'NetBT NodeType configuration' is set to 'Enabled: P-node (recommended)'."

The script checks the registry value for NetBT NodeType and sets it to 2 (P-node) if it is not already configured correctly. It then verifies the setting to confirm the change.

Parameters

None This script does not require any parameters.

Notes

• This script must be run with administrative privileges.
• Changes may require a system restart to take effect.
• This directly modifies the registry and does not use Group Policy.

This script fixes the windows CIS Benchmark check 18.5.2: "Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level is set to 'Enabled: Highest protection, source routing is completely disabled'."

This script fixes the windows CIS Benchmark check 18.5.3: "Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level ' is set to 'Enabled: Highest protection, source routing is completely disabled'."

This script fixes the windows CIS Benchmark check 18.5.4: "Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.5.5: "Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'."