ScriptShare

This script fixes the windows CIS Benchmark check 18.9.33.6.4: "Ensure 'Allow standby states (S1-S3) when sleeping (plugged in)' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.9.35.2: "Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.9.36.1: "Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.9.47.5.1: "Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.9.47.11.1: "Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.9.49.1: "Ensure 'Turn off the advertising ID' is set to 'Enabled'."

The script checks if it is running with administrative privileges, creates the necessary registry key if it does not exist, sets the "DisabledByGroupPolicy" DWORD value to 1 under the specified path, and then verifies that the value is correctly set. If the value is set as required, it reports a pass; otherwise, it reports a failure.

Notes

• This script must be run as an Administrator.
• It directly modifies the registry, which is equivalent to enabling the Group Policy setting.
• Use with caution, as registry changes can have system-wide effects.

This script fixes the windows CIS Benchmark check 18.9.51.1.1: "Ensure 'Enable Windows NTP Client' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.3.2: "Ensure 'Prevent non-admin users from installing packaged Windows apps' is set to 'Enabled'."

The script checks and sets the registry key at HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx\BlockNonAdminUserInstall to 1 (Enabled). It includes error handling and verification to confirm the setting is applied correctly.

This script fixes the windows CIS Benchmark check 18.10.4.1: "Ensure 'Let Windows apps activate with voice while the system is locked' is set to 'Enabled: Force Deny'."

This script fixes the windows CIS Benchmark check 18.10.5.1: "Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'."