This script fixes the windows CIS Benchmark check 18.6.20.1: "Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.6.20.2: "Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.6.21.2: "Ensure 'Prohibit connection to non-domain networks when connected to domain authenticated network' is set to 'Enabled'."

The script modifies the registry to enable the setting by setting the fBlockNonDomain value to 1 under the specified path. It then verifies that the value is correctly set. If the registry key does not exist, it is created.

Notes

• This script must be run with administrative privileges.
• Directly modifying the registry may be overridden by Group Policy if it is managing this setting.
• No reboot is typically required, but changes may not take effect until the user logs off and on or the policy is refreshed.

This script fixes the windows CIS Benchmark check 18.6.23.2.1: "Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.7.2: "Ensure 'Configure Redirection Guard' is set to 'Enabled: Redirection Guard Enabled'."

This script fixes the windows CIS Benchmark check 18.7.3: "Ensure 'Configure RPC connection settings: Protocol to use for outgoing RPC connections' is set to 'Enabled: RPC over TCP'."

The script checks and sets the registry key RpcUseNamedPipeProtocol to 1 (DWORD) under the specified path. It also verifies the change and outputs the result.

Notes

• This script must be run with administrative privileges.
• Applicable to Windows systems where the registry path exists.
• Directly modifies the registry; ensure you back up the registry before running.

This script fixes the windows CIS Benchmark check 18.7.4: "Ensure 'Configure RPC connection settings: Use authentication for outgoing RPC connections' is set to 'Enabled: Default'."

This script fixes the windows CIS Benchmark check 18.7.5: "Ensure 'Configure RPC listener settings: Authentication protocol to use for incoming RPC connections:' is set to 'Enabled: Negotiate' or higher."

This script fixes the windows CIS Benchmark check 18.7.7: "Ensure 'Configure RPC over TCP port' is set to 'Enabled: 0'."

The script checks if it is running with administrative privileges, creates the necessary registry key if it does not exist, sets the RpcTcpPort value to 0 (as a DWORD), and then verifies that the value is correctly set. This addresses the CIS check by modifying the registry directly.

Notes

• This script must be run as an Administrator.
• Modifying the registry directly may be overridden by Group Policy. If Group Policy is in use, consider configuring it via the Group Policy Editor instead.
• The script is compatible with PowerShell 5.1 and later.

This script fixes the windows CIS Benchmark check 18.7.9: "Ensure 'Manage processing of Queue-specific files' is set to 'Enabled: Limit Queue-specific files to Color profiles'."