This script fixes the windows CIS Benchmark check 5.22: "Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled'."

The script checks the current 'Start' registry value for the UmRdpService, sets it to 4 (Disabled) if necessary, and verifies the change to ensure the CIS check passes.

This script fixes the windows CIS Benchmark check 5.21: "Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 5.20: "Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled'."

The script checks the current 'Start' value in the specified registry path. If it is not set to 4 (Disabled), it sets it to 4 and verifies the change. It handles cases where the registry key or property may not exist.

This script fixes the windows CIS Benchmark check 5.19: "Ensure 'Remote Access Auto Connection Manager (RasAuto)' is set to 'Disabled'."

The script checks the current 'Start' value in the registry for the RasAuto service. If it is not set to 4 (Disabled), it sets it to 4. After modification, it verifies the change to ensure compliance.

This script fixes the windows CIS Benchmark check 5.18: "Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled'."

The script checks the current state of the registry value, sets it to the required state if necessary, and then verifies that the change was successful. This is based on the CIS recommendation to disable the 'Problem Reports and Solutions Control Panel Support' service.

Parameters

None This script does not take any parameters.

Example(s)

.\Fix-CIS-WerCplSupport.ps1

Notes

• This script must be run with administrative privileges.
• It modifies the Windows registry, so use with caution and ensure you have a system backup.

This script fixes the windows CIS Benchmark check 5.11: "Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 2.3.17.3: "Ensure 'User Account Control: Behavior of the elevation prompt for standard users' is set to 'Automatically deny elevation requests'."

This script fixes the windows CIS Benchmark check 2.3.17.2: "Ensure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is set to 'Prompt for consent on the secure desktop'."

This script fixes the windows CIS Benchmark check 2.3.17.1: "Ensure 'User Account Control: Admin Approval Mode for the Built-in Administrator account' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 2.3.11.4: "Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types'."