This script fixes the Windows CIS Benchmark check 17.7.3: "Ensure 'Audit Authorization Policy Change' is set to include 'Success'."
This script fixes the Windows CIS Benchmark check 2.3.10.4: "Ensure 'Network access: Do not allow storage of passwords and credentials for network authentication' is set to 'Enabled'."
This script fixes the Windows CIS Benchmark check 18.5.11: "Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'."
This script fixes the Windows CIS Benchmark check 18.1.2.2: "Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'."
Disables AD user accounts inactive beyond a threshold, using a last-logon value reconciled across every domain controller. Honours -WhatIf / -Confirm.
https://www.navanem.com/scripts/powershell-disable-inactive-ad-accounts
Creates a local administrator account if it does not already exist.
https://www.navanem.com/scripts/powershell-create-local-admin-account
Updates Google Chrome on Linux to at least version 143.0.7499.110 to fix CVE-2025-14174
This script fixes the Windows CIS Benchmark check 17.5.5: "Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'."