Skip to content

Test‐CISBenchmarkSystemServices

Mike Hiersche edited this page Oct 26, 2023 · 2 revisions

Test-CISBenchmarkSystemServices

SYNOPSIS

5 System Services

DESCRIPTION

This command will test all the settings defined in section 5 of the CIS Microsoft Windows Server 2022 Benchmark v2.0.0.

PARAMETERS

-Level <Int32>

This parameter is used to filter by the benchmark level.

The valid options are:

1 = Level 1 of the benchmark. This is intended to provide a solid baseline for security.

2 = Level 2 of the benchmark. This is intended to provide a higher level of security, at the risk of breaking some functionality. This level requires and includes all the Level 1 benchmarks

Required? true
Position? 1
Default value 0
Accept pipeline input? false

-NextGenerationWindowsSecurity <Boolean>

This parameter is used to enable the Next Generation Windows Security optional add-on to the CIS Benchmark.

These settings are recommended in environments taht can support them.

Required? false
Position? 2
Default value False
Accept pipeline input? false

EXAMPLE

EXAMPLE 1

Test-CISBenchmarkSystemServices
Number                Name                                                                                                Source                    Pass    
--------------------  ------------------                                                                                  ------                    ----    
5.1                   (L1) Ensure 'Print Spooler (Spooler)' is set to 'Disabled' (DC only)                                Group Policy Settings     True
Clone this wiki locally