https://github.com/technion/jslockdown
A DSC module for establishing a secure Windows10/2016 baseline
https://github.com/technion/jslockdown
Last synced: over 1 year ago
JSON representation
A DSC module for establishing a secure Windows10/2016 baseline
- Host: GitHub
- URL: https://github.com/technion/jslockdown
- Owner: technion
- Created: 2018-10-14T08:16:50.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2018-12-24T02:27:01.000Z (over 7 years ago)
- Last Synced: 2025-01-24T09:29:27.584Z (over 1 year ago)
- Language: PowerShell
- Homepage:
- Size: 6.84 KB
- Stars: 0
- Watchers: 3
- Forks: 0
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Windows Standard Lockdown
Desired State Configuration module designed to implement a secure baseline.
There are dozens of projects with 800 point checklists designed for secure baselines. This project is designed to offer an automated implementation of the few most practical and beneficial configuration items.
The intention is that, by being less intimidating than large frameworks, this baseline can be more appealing.
## Targets
Script is designed for both Windows 10 and Windows 2016. Note that a key point in avoiding the need to audit many often recommended settings, is that they are already defaults on these platforms.
## Use
You will need a required module to build the script:
```
install-module SecurityPolicyDsc
install-module NetworkingDsc
```
Edit the .ps1 script as required, and recompile:
```
. .\JSLockdown.ps1
JSLockdown
```
If you are happy with the existing rules, skip to running it:
```
Start-DscConfiguration -Path .\JSLockdown\ -Verbose -Wait -Force
```
## Bugs
Office Macro settings are per user settings, and thus cannot be set by DSC. They are however critical to security. Please implement a suitable lockdown.