ScriptShare

This script fixes the Linux CIS Benchmark check 3.5.4: "Ensure TIPC is disabled."

This script fixes the Linux CIS Benchmark check 5.4.1.1: "Ensure password expiration is 365 days or less."

This script fixes the Linux CIS Benchmark check 5.4.1.2: "Ensure minimum days between password changes is configured."

This script fixes the Linux CIS Benchmark check 5.4.1.4: "Ensure inactive password lock is 30 days or less."

This script fixes the darwin CIS Benchmark check 35054: "Ensure the Sudo Timeout Period Is Set to Zero."

This script fixes the windows CIS Benchmark check 5.4: "Ensure 'Downloaded Maps Manager (MapsBroker)' is set to 'Disabled'."

The script:

1. Verifies that MapsBroker exists.
2. Stops it if running.
3. Sets StartupType to Disabled.
4. Writes Start = 4 to the registry for auditors that read raw values.

Example(s)

.\Disable-MapsBroker.ps1

This script fixes the windows CIS Benchmark check 18.5.4: "Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.9.5.4: "Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'."

This script fixes the windows CIS Benchmark check 18.9.25.4: "Ensure 'Password Settings: Password Complexity' is set to 'Enabled: Large letters + small letters + numbers + special characters'."

The script modifies the registry to enable password complexity with large letters, small letters, numbers, and special characters (value 4) under the LAPS policy path. It then verifies that the setting is correctly applied.

Notes

• This script assumes LAPS is installed, as the registry path is specific to LAPS.
• Direct registry modification may be overwritten by Group Policy settings. Use this script for testing or when GPO is not in use.
• Compatible with PowerShell 5.1.

This script fixes the windows CIS Benchmark check 18.10.15.4: "Ensure 'Do not show feedback notifications' is set to 'Enabled'."