This script fixes the windows CIS Benchmark check 18.10.43.3: "Ensure 'Allow data persistence for Microsoft Defender Application Guard' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.10.43.4: "Ensure 'Allow files to download and save to the host operating system from Microsoft Defender Application Guard' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.10.43.6: "Ensure 'Turn on Microsoft Defender Application Guard in Managed Mode' is set to 'Enabled: 1'."

The script checks and sets the registry value at HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI\AllowAppHVSI_ProviderSet to 1 (DWORD). It verifies the setting after application and reports the result.

Notes

• This script must be run with administrative privileges.
• Compatible with PowerShell 5.1 and later.
• Based on CIS benchmark for Windows.

This script fixes the windows CIS Benchmark check 18.10.49.1: "Ensure 'Enable news and interests on the taskbar' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.10.50.1: "Ensure 'Prevent the usage of OneDrive for file storage' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.55.1: "Ensure 'Turn off Push To Install service' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.56.2.2: "Ensure 'Disable Cloud Clipboard integration for server-to-client data transfer' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.56.2.3: "Ensure 'Do not allow passwords to be saved' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.56.3.3.1: "Ensure 'Allow UI Automation redirection' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 18.10.56.3.3.2: "Ensure 'Do not allow COM port redirection' is set to 'Enabled'."