From e71459defeb5dfd0c81e2bff3edb0b929f9bd3bb Mon Sep 17 00:00:00 2001 From: abrown38 Date: Mon, 22 Sep 2025 11:32:14 +0100 Subject: [PATCH] gpo fix to print spooler --- .../roles/win_domain_controller/files/serverhardening0.3.ps1 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ansible/roles/win_domain_controller/files/serverhardening0.3.ps1 b/ansible/roles/win_domain_controller/files/serverhardening0.3.ps1 index 94f7484..8fd7e0d 100644 --- a/ansible/roles/win_domain_controller/files/serverhardening0.3.ps1 +++ b/ansible/roles/win_domain_controller/files/serverhardening0.3.ps1 @@ -178,7 +178,7 @@ Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "RestrictAnonymous" -key Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "DisableDomainCreds" -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" -Value 1 -Type DWord Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "UseMachineId " -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" -Value 1 -Type DWord Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "LmCompatibilityLevel " -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" -Value 5 -Type DWord -Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "Start" -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" -Value 4 -Type DWord +Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "Start" -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" -Value 2 -Type DWord Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "LogDroppedPackets" -key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging" -Value 1 -Type DWord @@ -238,4 +238,4 @@ set-addefaultDomainPolicy -identity $domainid -complexityEnabled $true -lockoutd $domainguestid2 = $domainid + "_" + "guest" get-aduser -identity 'guest' | Rename-AdObject -NewName $domainguestid2 -Write-Output "THIS SCRIPT ACTUALLY RAN" | Out-File -FilePath 'C:\eidf\HardenScript.txt' \ No newline at end of file +Write-Output "THIS SCRIPT ACTUALLY RAN" | Out-File -FilePath 'C:\eidf\HardenScript.txt'