ScriptShare

This script fixes the darwin CIS Benchmark check 35054: "Ensure the Sudo Timeout Period Is Set to Zero."

This script fixes the windows CIS Benchmark check 5.4: "Ensure 'Downloaded Maps Manager (MapsBroker)' is set to 'Disabled'."

The script:

1. Verifies that MapsBroker exists.
2. Stops it if running.
3. Sets StartupType to Disabled.
4. Writes Start = 4 to the registry for auditors that read raw values.

Example(s)

.\Disable-MapsBroker.ps1

This script fixes the windows CIS Benchmark check 18.5.4: "Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.9.5.4: "Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'."

This script fixes the windows CIS Benchmark check 18.9.25.4: "Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters'."

The script modifies the registry to enable password complexity with large letters, small letters, numbers, and special characters (value 4) under the LAPS policy path. It then verifies that the setting is correctly applied.

Notes

• This script assumes LAPS is installed, as the registry path is specific to LAPS.
• Direct registry modification may be overwritten by Group Policy settings. Use this script for testing or when GPO is not in use.
• Compatible with PowerShell 5.1.

This script fixes the windows CIS Benchmark check 18.10.15.4: "Ensure 'Do not show feedback notifications' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.25.4.2: "Ensure 'System: Specify the maximum log file size (KB)' is set to 'Enabled: 32,768 or greater'."

This script fixes the windows CIS Benchmark check 18.10.65.4: "Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'."

The script checks the registry key 'DisableOSUpgrade' under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore. If the key is not set to 1 (Enabled), it sets it and then verifies the setting to ensure compliance.

This script fixes the windows CIS Benchmark check 5.44: "Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 5.41: "Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'."