ScriptShare

This script fixes the windows CIS Benchmark check 2.3.10.4: "Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'."

The script checks the registry key at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa for the property DisableDomainCreds. If it is not set to 1, the script sets it to 1 (Enabled). After modification, it verifies the setting and reports the result.

Notes

• This script directly modifies the registry. In managed environments, consider using Group Policy for persistent changes.
• The change may require a system restart to fully enforce, depending on the system state.
• Compatible with PowerShell 5.1.