Cloudneeti / os-harderning-scripts

Operating System Hardening Scripts
MIT License
113 stars 96 forks source link

Windows Server 2016 policy Increase_a_process_working_set is not working #16

Open JljHook opened 3 years ago

JljHook commented 3 years ago

After I execute the script and reboot policy has only 'Users'. It should be 'Administatror, Local Service'

joelmforsyth commented 2 years ago

I was able to resolve the issue by changing the configuration to this:

UserRightsAssignment SeIncreaseWorkingSetPrivilege {
    Policy   = 'Increase_a_process_working_set'
    Identity = 'Administrators','Local Service'
    Force    = $true
}

If anyone is here having issues with this script, I have updated it to match Azure standards for Windows Server 2019 here: https://github.com/joelmforsyth/AzureSecurityBaseline/blob/main/AzureSecurity_WindowsServer2019.ps1

Sir-HatX commented 2 years ago
#Ensure 'Access this computer from the network is set to Administrators, Authenticated Users' (MS only)
        UserRightsAssignment Accessthiscomputerfromthenetwork {
             Policy   = 'Access_this_computer_from_the_network'
            Identity = 'Administrators, Authenticated Users'
         }

Am trying to add more configurations but am getting an error > UserRightsAssignment Windows Server 2019 script