This script fixes the Windows CIS Benchmark check 2.3.10.4: "Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'."
This script fixes the Windows CIS Benchmark check 18.5.11: "Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'."
This script fixes the Windows CIS Benchmark check 18.1.2.2: "Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'."
Disables AD user accounts inactive beyond a threshold, using a last-logon value reconciled across every domain controller. Honours -WhatIf / -Confirm.
https://www.navanem.com/scripts/powershell-disable-inactive-ad-accounts
Creates a local administrator account if it does not already exist.
https://www.navanem.com/scripts/powershell-create-local-admin-account
This script fixes the Windows CIS Benchmark check 17.5.5: "Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'."
This script fixes the Windows CIS Benchmark check 18.1.1.1: "Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'."
This script fixes the vulnerability CVE-2025-15556 affecting Notepad++ (64-bit x64) version 8.7 on Windows
Creates a "No Sleep" mode for windows machines so its always on and connected