question

ColmMcGrath-9105 avatar image
0 Votes"
ColmMcGrath-9105 asked GaryReynolds edited

Programatically Set Values for Security Recommendations

Hi,
I've been using the following to fix recommendation in security center:
https://raw.githubusercontent.com/Cloudneeti/os-harderning-scripts/master/WindowsServer2016/CSBP_WindowsServer2016.ps1

The registry values are being set, but security center isn't showing these fixes. Am I missing something?

I'm basically going through the "Remediate security configurations" page in security center and came across the above repo which upon going through it covers I would say 90%+ of the CCE / AZ recommendations in security center. Other documents / info I have looked at cover manually setting policies etc in the windows GUI which did seem to work but doing this programmatically does not.

Thanks,
Colm

windows-server-2019windows-server-2016windows-server-2012windows-server-securityazure-security-center
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

GaryReynolds avatar image
1 Vote"
GaryReynolds answered GaryReynolds edited

Hi

Have look at this post where gpo setting where not being applied because the gpo client side extension where not being added to the gpo when automating with powershell.

https://docs.microsoft.com/en-us/answers/questions/593885/gpo-updated-but-not-applied.html

Gary.

5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.