# windows-server-hardening

Powershell scripts to harden Windows Server 2016 & 2019

Copy over and run the CIS Windows 2016 hardening Power Shell script.

- Start a powershell session as administrator
- run the following commands in the location you copied the script to:
~~~
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

Install−PackageProvider −Name Nuget −Force

install-module -Name PSDesiredStateConfiguration
install-module -Name AuditPolicyDsc
install-module -Name SecurityPolicyDsc
install-module -Name NetworkingDsc

.\HT-WindowsServer2016.ps1
Start-DscConfiguration -Path .\HT-WindowsServer2016  -Force -Verbose -Wait
~~~