ScriptShare

This script fixes the windows CIS Benchmark check 18.9.26.1: "Ensure 'Allow Custom SSPs and APs to be loaded into LSASS' is set to 'Disabled'."

The script checks if it is running with administrative privileges, sets the registry key to disable custom SSPs and APs, and then verifies that the setting is correctly applied. This addresses the CIS recommendation by ensuring the registry value is set to 0 (Disabled).

Notes

• This script must be run as an Administrator.
• It is compatible with PowerShell 5.1 and later.
• Modifying registry settings can have security implications; use with caution and ensure proper backups.

This script fixes the windows CIS Benchmark check 18.9.27.1: "Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.9.28.1: "Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.9.28.2: "Ensure 'Do not display network selection UI' is set to 'Enabled'."

The script modifies the registry to set the DontDisplayNetworkSelectionUI value to 1 under the specified path. It then checks the value to confirm it is correctly set. This addresses the CIS check for ensuring the network selection UI is not displayed.

This script fixes the windows CIS Benchmark check 18.9.28.3: "Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.9.28.5: "Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.9.28.6: "Ensure 'Turn off picture password sign-in' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.9.31.1: "Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.9.31.2: "Ensure 'Allow upload of User Activities' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.9.33.6.1: "Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'."

The script sets the registry value DCSettingIndex to 0 at the specified path and then verifies that the value is correctly applied.