Test‐LocalPoliciesUserRightsAssignment

Test-LocalPoliciesUserRightsAssignment

SYNOPSIS

2.2 User Rights Assignment

DESCRIPTION

This command will test all the settings defined in section 2.2 of the CIS Microsoft Windows Server 2022 Benchmark v2.0.0.

PARAMETERS

-Level <Int32>

This parameter is used to filter by the benchmark level.

The valid options are:

1 = Level 1 of the benchmark. This is intended to provide a solid baseline for security.

2 = Level 2 of the benchmark. This is intended to provide a higher level of security, at the risk of breaking some functionality. This level requires and includes all the Level 1 benchmarks

Required?	true
Position?	1
Default value	0
Accept pipeline input?	false

-NextGenerationWindowsSecurity <Boolean>

This parameter is used to enable the Next Generation Windows Security optional add-on to the CIS Benchmark.

These settings are recommended in environments taht can support them.

Required?	false
Position?	2
Default value	False
Accept pipeline input?	false

EXAMPLE

EXAMPLE 1

Test-LocalPoliciesUserRightsAssignment

Number    Name                                                                                                Source                    Pass    
--------- ------------------                                                                                  ------                    ----    
2.2.1     (L1) Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'                      Group Policy Settings     True    
2.2.2     (L1) Ensure 'Access this computer from the network' is set to 'Administrators, Authenticated Use... Group Policy Settings     True    
2.2.4     (L1) Ensure 'Act as part of the operating system' is set to 'No One'                                Group Policy Settings     True