ScriptShare

The Crowdstrike Deployment script on their github didn't work for me. Built this script to deploy out CrowdStrike across an MSP's Customers. Let me know if it works for you!

This script fixes the Windows CIS Benchmark check 18.1.2.2: "Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'."

Disables AD user accounts inactive beyond a threshold, using a last-logon value reconciled across every domain controller. Honours -WhatIf / -Confirm.

https://www.navanem.com/scripts/powershell-disable-inactive-ad-accounts

Creates a local administrator account if it does not already exist.

https://www.navanem.com/scripts/powershell-create-local-admin-account

This script fixes the Windows CIS Benchmark check 18.6.10.2: "Ensure 'Turn off Microsoft Peer-to-Peer Networking Services' is set to 'Enabled'."

This script fixes the Windows CIS Benchmark check 18.6.8.1: "Ensure 'Enable insecure guest logons' is set to 'Disabled'."

This script fixes the Windows CIS Benchmark check 17.5.5: "Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'."

This script fixes the Windows CIS Benchmark check 18.6.23.2.1: "Ensure 'Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services' is set to 'Disabled'."

This script fixes the Windows CIS Benchmark check 18.1.1.1: "Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'."