PowerShell Security Hardening Script Pack

Automate Windows Security Hardening with PowerShell

This script pack helps IT professionals and sysadmins lock down their systems quickly and consistently using proven hardening techniques — all through PowerShell.

Perfect for small business environments, consultants, internal audits, or MSP baseline setups.

🔐 Included Scripts:

1. Disable SMBv1
   Remove the outdated and vulnerable SMBv1 protocol
2. Enforce Password Policies
   Set complexity, length, and lockout rules on local systems
3. Enable Audit Logging
   Turn on auditing for logons, object access, and privilege use
4. Enable Windows Defender + Update
   Start Defender and update virus definitions
5. Configure Firewall Rules
   Block inbound traffic except management ports
6. Disable Unused Services
   Stop legacy services like Telnet and Remote Registry

✅ What You Get:

• 6 PowerShell .ps1 files
• README for each script with usage instructions and safety notes
• Main README overview for quick reference
• Designed for PowerShell 5.1+ on Windows 10/11 and Server 2016–2022

🔧 Requirements:

• Local admin rights
• PowerShell 5.1 or newer
• Test in a lab environment before deployment

Use these as a standalone toolkit or combine them with your AD and Maintenance packs to build your own security-focused automation suite.