Test‐SecurityOptionsNetworkAccess

Test-SecurityOptionsNetworkAccess

SYNOPSIS

2.3.10 Network Access

DESCRIPTION

This command will test all the settings defined in section 2.3.10 of the CIS Microsoft Windows Server 2022 Benchmark v2.0.0.

PARAMETERS

-Level <Int32>

This parameter is used to filter by the benchmark level.

The valid options are:

1 = Level 1 of the benchmark. This is intended to provide a solid baseline for security.

2 = Level 2 of the benchmark. This is intended to provide a higher level of security, at the risk of breaking some functionality. This level requires and includes all the Level 1 benchmarks

Required?	true
Position?	1
Default value	0
Accept pipeline input?	false

-NextGenerationWindowsSecurity <Boolean>

This parameter is used to enable the Next Generation Windows Security optional add-on to the CIS Benchmark.

These settings are recommended in environments taht can support them.

Required?	false
Position?	2
Default value	False
Accept pipeline input?	false

EXAMPLE

EXAMPLE 1

Test-SecurityOptionsNetworkAccess -Level 1

Number    Name                                                                                                Source                    Pass    
--------- ------------------                                                                                  ------                    ----    
2.3.10.1  (L1) Ensure 'Network access: Allow anonymous SID/Name translation' is set to 'Disabled'             Group Policy Settings     True    
2.3.10.5  (L1) Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disab... Group Policy Settings     True    
2.3.10.6  (L1) Configure 'Network access: Named Pipes that can be accessed anonymously' (DC only)             Group Policy Settings     True