Dan Mansfield danmansfield
danmansfield
/ WindowsSecurityBaseline.ps1
Created
March 11, 2021 10:06
Manages various security settings through local group policy, without the need for a domain controller or Azure AD. Allows for central management of Windows Defender when combined with event ID monitoring from your RMM of choice. Errors are also written to the event log for monitoring purposes.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <# | |
| .SYNOPSIS | |
| Configures Windows Defender and various security settings. | |
| .DESCRIPTION | |
| This script uses the PolicyFileEditor PowerShell Module to manage local group policy settings of Windows Defender and various other OS security related settings. | |
| .EXAMPLE | |
| ./WindowsSecurityBaseline.ps1 -ASRMode 2 | |
| .LINK | |
| Required PowerShell Module: https://www.powershellgallery.com/packages/PolicyFileEditor | |
| Group Policy Registry Lookup: https://gpsearch.azurewebsites.net/ |