Skip to content

Latest commit

 

History

History
19 lines (16 loc) · 1.07 KB

README.md

File metadata and controls

19 lines (16 loc) · 1.07 KB

win

This is a script to harden your Windows server or workstation.

instructions

  1. Download as zip. It'll be named win-main.
  2. Edit the users.txt and admins.txt files. If there's some Windows system critical services, possibly edit the enabled_services.txt or disabled_services.txt files. The script will ask you if you want to enable and configure RDP, FTP, and SMB.
  3. Run the following in a Powershell terminal with administrative privileges:
Set-ExecutionPolicy Unrestricted -Confirm -Force
.\scripts\main.ps1

The script will try to import a GPO last. You can start doing your own thing by then, even before the GPO finishes importing. The output will be logged to script_log.txt in the logs folder.

If you want to look for media files, run media.bat, which will log to a folder on your user's desktop.

GPOs

  • {9AA00A8B-E75B-452C-B263-D4FA774C511E} is Kile and Nick's Win10UltGPO
  • {EE1CF134-A163-4488-8832-D7CEAC60FB43} is Olric's old one
  • {79677B19-3111-423D-AB81-B72CBD52008D} is the new one made by Olric and Shirley