HotCakeX
commented
3 months ago Hi, check if you can download these files successfully from the affected device by running this command. It will create a folder named "DownloadTestTemp" in the root of the C drive and the downloaded files will be saved in there.
$Directory = New-Item -Path 'C:\' -Name 'DownloadTestTemp' -ItemType 'Directory' -Force
'https://download.microsoft.com/download/8/5/C/85C25433-A1B0-4FFA-9429-7E023E7DA8D8/Windows%2011%20v23H2%20Security%20Baseline.zip',
'https://download.microsoft.com/download/8/5/C/85C25433-A1B0-4FFA-9429-7E023E7DA8D8/Microsoft%20365%20Apps%20for%20Enterprise%202306.zip',
'https://download.microsoft.com/download/8/5/C/85C25433-A1B0-4FFA-9429-7E023E7DA8D8/LGPO.zip',
'https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/main/Harden-Windows-Security%20Module/Main%20files/Resources/Security-Baselines-X.zip',
'https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/main/Harden-Windows-Security%20Module/Main%20files/Resources/Registry.csv',
'https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/main/Harden-Windows-Security%20Module/Main%20files/Resources/ProcessMitigations.csv',
'https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/main/Harden-Windows-Security%20Module/Main%20files/Resources/EventViewerCustomViews.zip' | ForEach-Object -Begin { $i = 0 } -Process {
[System.Net.WebClient]$WC = New-Object -TypeName System.Net.WebClient
$WC.DownloadFile($_, (Join-Path -Path $Directory -ChildPath "$i.zip"))
$i++
}
ckuever
Hello,
anyone else have this problem:
VERBOSE: Running Protect-WindowsSecurity function as part of the Harden-Windows-Security module VERBOSE: Importing the required sub-modules VERBOSE: Checking for updates... VERBOSE: Creating the working directory VERBOSE: Getting the current configurations and preferences of the Microsoft Defender... VERBOSE: Backing up the current Controlled Folder Access allowed apps list in order to restore them at the end VERBOSE: Temporarily adding the currently running PowerShell executables to the Controlled Folder Access allowed apps list VERBOSE: Checking if the OS is Windows Home edition... VERBOSE: Checking if the OS build is equal or greater than the required build... VERBOSE: Checking if Secure Boot is enabled... VERBOSE: Checking if TPM is available and enabled... VERBOSE: Downloading the required files VERBOSE: Skipping downloading the Security-Baselines-X because of local mode. VERBOSE: Skipping downloading the Registry because of local mode. VERBOSE: Skipping downloading the ProcessMitigations because of local mode. VERBOSE: Skipping downloading the EventViewerCustomViews because of local mode. VERBOSE: Finally block is running VERBOSE: Reverting the PowerShell executables and powercfg.exe allow listings in Controlled folder access VERBOSE: Removing the working directory VERBOSE: Disabling progress bars VERBOSE: Restoring the title of the PowerShell back to what it was prior to running the script/module VERBOSE: Setting the execution policy back to what it was prior to running the script/module Encountered Error: The required files could not be downloaded, Make sure you have Internet connection.
as it runs on a secured workstation we enforce powershell in constrained language, is constrainedlanguage mode tested?
We do not see any other issues then this error which is (at least from verbose output)somehow in this lines?
Write-Verbose -Message 'Setting the execution policy back to what it was prior to running the script/module' Set-ExecutionPolicy -ExecutionPolicy "$CurrentExecutionPolicy" -Scope 'Process' -Force
manybe any suggestions?
thanks.