Programatically Set Values for Security Recommendations

Question

Hi,
I've been using the following to fix recommendation in security center:
https://raw.githubusercontent.com/Cloudneeti/os-harderning-scripts/master/WindowsServer2016/CSBP_WindowsServer2016.ps1

The registry values are being set, but security center isn't showing these fixes. Am I missing something?

I'm basically going through the "Remediate security configurations" page in security center and came across the above repo which upon going through it covers I would say 90%+ of the CCE / AZ recommendations in security center. Other documents / info I have looked at cover manually setting policies etc in the windows GUI which did seem to work but doing this programmatically does not.

Thanks,
Colm

Answer 1

Hi

Have look at this post where gpo setting where not being applied because the gpo client side extension where not being added to the gpo when automating with powershell.

https://learn.microsoft.com/en-us/answers/questions/593885/gpo-updated-but-not-applied.html

Gary.