adam/windows-ansible
1
0 Fork 0
mirror of https://git.ecdf.ed.ac.uk/win_automation/windows-ansible.git synced 2026-10-26 08:37:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

gpo fix to print spooler

Browse Source
This commit is contained in:
abrown38 committed 2025-09-22 11:32:14 +01:00
1 parent 0e71609b40
commit e71459defe
1 file changed
+2 -2
Download Patch File Download Diff File Expand all files Collapse all files
ansible/roles/win_domain_controller/files/serverhardening0.3.ps1
+2 -2
View File
@@ -178,7 +178,7 @@ Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "RestrictAnonymous" -key
Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "DisableDomainCreds" -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" -Value 1 -Type DWord Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "DisableDomainCreds" -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" -Value 1 -Type DWord
Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "UseMachineId " -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" -Value 1 -Type DWord Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "UseMachineId " -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" -Value 1 -Type DWord
Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "LmCompatibilityLevel " -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" -Value 5 -Type DWord Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "LmCompatibilityLevel " -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" -Value 5 -Type DWord
Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "Start" -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" -Value 4 -Type DWord Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "Start" -key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler" -Value 2 -Type DWord
Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "LogDroppedPackets" -key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging" -Value 1 -Type DWord Set-GPRegistryValue -Name "RDS WB hardening" -ValueName "LogDroppedPackets" -key "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\Logging" -Value 1 -Type DWord
@@ -238,4 +238,4 @@ set-addefaultDomainPolicy -identity $domainid -complexityEnabled $true -lockoutd
$domainguestid2 = $domainid + "_" + "guest" $domainguestid2 = $domainid + "_" + "guest"
get-aduser -identity 'guest' | Rename-AdObject -NewName $domainguestid2 get-aduser -identity 'guest' | Rename-AdObject -NewName $domainguestid2
Write-Output "THIS SCRIPT ACTUALLY RAN" | Out-File -FilePath 'C:\eidf\HardenScript.txt' Write-Output "THIS SCRIPT ACTUALLY RAN" | Out-File -FilePath 'C:\eidf\HardenScript.txt'