ScriptShare

This script fixes the Windows CIS Benchmark check 5.18: "Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 5.1: "Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'."

The script:

1. Checks whether BTAGService exists.
2. Stops the service if it is running.
3. Sets the startup type to Disabled (both via Set-Service and by setting the registry value Start = 4 for redundancy).

Example(s)

.\Disable-BTAGService.ps1

This script fixes the windows CIS Benchmark check 18.5.12: "Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'."

This script fixes the windows CIS Benchmark check 18.9.5.1: "Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.9.25.1: "Ensure 'Configure password backup directory' is set to 'Enabled: Active Directory' or 'Enabled: Azure Active Directory'."

This script fixes the windows CIS Benchmark check 18.9.47.5.1: "Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.10.5.1: "Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.15.1: "Ensure 'Allow Diagnostic Data' is set to 'Enabled: Diagnostic data off (not recommended)' or 'Enabled: Send required diagnostic data'."

This script fixes the windows CIS Benchmark check 18.10.25.1.2: "Ensure 'Application: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'."

This script fixes the windows CIS Benchmark check 18.10.55.1: "Ensure 'Turn off Push To Install service' is set to 'Enabled'."