This script fixes the Windows CIS Benchmark check 17.3.1: "Ensure 'Audit PNP Activity' is set to include 'Success'."
This script fixes the vulnerability CVE-2025-9187 affecting Mozilla Firefox (x64 en-US) version 141.0.3 on Windows
This script fixes the vulnerability CVE-2025-55188 affecting 7-Zip 24.09 (x64) version 24.09 on Windows
This script fixes the Windows CIS Benchmark check 17.7.5: "Ensure 'Audit Other Policy Change Events' is set to include 'Failure'."
Exports MDM diagnostics information on an Intune joined computer. If running from Syncro, also uploads the report to the asset in Syncro.
This script fixes the Windows CIS Benchmark check 5.27: "Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'."
This script fixes the Windows CIS Benchmark check 5.27: "Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'."
This script fixes the Windows CIS Benchmark check 18.9.47.11.1: "Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'."
This script fixes the Windows CIS Benchmark check 2.3.11.1: "Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'."
The script sets the registry key "UseMachineId" under "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" to 1 (Enabled) and checks if the value was set correctly.
This script fixes the windows CIS Benchmark check 18.10.9.1.7: "Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives' is set to 'Enabled: False'."
• Creates HKLM\SOFTWARE\Policies\Microsoft\FVE if missing. • Writes/overwrites DWORD FDVActiveDirectoryBackup = 1 in BOTH registry views (Registry64 and Registry32). • Idempotent: rerunning simply re-applies the compliant value.
.\Set-BitLockerADBackupFixed.ps1