ScriptShare

This script fixes the windows CIS Benchmark check 18.10.43.6: "Ensure 'Turn on Microsoft Defender Application Guard in Managed Mode' is set to 'Enabled: 1'."

The script checks and sets the registry value at HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI\AllowAppHVSI_ProviderSet to 1 (DWORD). It verifies the setting after application and reports the result.

Notes

• This script must be run with administrative privileges.
• Compatible with PowerShell 5.1 and later.
• Based on CIS benchmark for Windows.