Windows-Terminal-Hardening is a PowerShell script that elevates privileges and performs various Windows hardening tasks to enhance security. The script requires administrative rights to run and performs the following actions: disabling CMD and PowerShell v2, setting PowerShell Constrained Language Mode, enabling PowerShell logging, removing WSMan listeners, disabling the WSMan Service, and disabling the firewall rule for Windows Remote Management. The script outputs a message confirming the elevation of privileges.

• Disables Command Prompt
• Disables PowerShell v2
• Disables WSMAN and PSRemoting
• Enables PowerShell Constrained Language Mode
• Enables PowerShell Logging

• PowerShell Best Practices
• PowerShell Constrained Language Mode
• Securing PowerShell in the Enterprise
• Windows Defender Hardening

Download the required files from the GitHub Repository

The script may be lauched from the extracted GitHub download like this:

.\sos-windowsterminalhardening.ps1

 

• github.com/simeononsecurity

• simeononsecurity.ch