ScriptShare

This script fixes the windows CIS Benchmark check 5.36: "Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled'."

The script checks if it is running with administrative privileges, sets the 'Start' registry value to 4 (Disabled) for the icssvc service, and then verifies the setting to ensure it matches the desired state.

This script fixes the windows CIS Benchmark check 5.35: "Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled' or 'Not Installed'."

This script fixes the windows CIS Benchmark check 5.34: "Ensure 'Windows Event Collector (Wecsvc)' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 5.30: "Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 5.26: "Ensure 'Server (LanmanServer)' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 5.23: "Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'."

The script checks the current 'Start' value in the registry for the RpcLocator service. If it is not set to 4 (Disabled), it sets it to 4. After the change, it verifies the registry value and reports the result. This addresses the CIS benchmark requirement.

Notes

• This script must be run with administrative privileges.
• Modifying service start types can have system-wide implications; use with caution.
• The change may require a system reboot to fully take effect, but the registry value will be updated immediately.

This script fixes the windows CIS Benchmark check 5.22: "Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled'."

The script checks the current 'Start' registry value for the UmRdpService, sets it to 4 (Disabled) if necessary, and verifies the change to ensure the CIS check passes.

This script fixes the windows CIS Benchmark check 5.21: "Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'."

This script fixes the windows CIS Benchmark check 5.20: "Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled'."

The script checks the current 'Start' value in the specified registry path. If it is not set to 4 (Disabled), it sets it to 4 and verifies the change. It handles cases where the registry key or property may not exist.

This script fixes the windows CIS Benchmark check 5.19: "Ensure 'Remote Access Auto Connection Manager (RasAuto)' is set to 'Disabled'."

The script checks the current 'Start' value in the registry for the RasAuto service. If it is not set to 4 (Disabled), it sets it to 4. After modification, it verifies the change to ensure compliance.