ScriptShare

This script fixes the Windows CIS Benchmark check 2.3.11.11: "Ensure 'Network security: Restrict NTLM: Audit Incoming NTLM Traffic' is set to 'Enable auditing for all accounts'."

This script fixes the Windows CIS Benchmark check 2.3.11.10: "Ensure 'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is set to 'Require NTLMv2 session security, Require 128-bit encryption'."

This script fixes the Windows CIS Benchmark check 2.3.11.1: "Ensure 'Network security: Allow Local System to use computer identity for NTLM' is set to 'Enabled'."

The script sets the registry key "UseMachineId" under "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" to 1 (Enabled) and checks if the value was set correctly.