CWiCCS

CWiCCS (read as QUICKS) - Checking and Controlling and Fixing some Windows settings from defined / whitelisted system config profiles

Native PowerShell Tool

• Compatibility list
  • Windows Server 2012/2016/2019
  • Windows 10 (tested on Windows Pro)
  • Powershell v5, v6, v7
• HTML reports
• OS information
• Profiling checks
  • Port listing
  • Installed software names and versions
  • GPO settings
  • and more…

Downoad / Install

git clone https://github.com/m0zgen/cwiccs.git

or

You can download archive from repository - Code > Download as ZIP

Runs / Options

After download CWiCCS, please cd to cwiccs folder and them run script:

.\cwiccs.ps1

Run with bypass powershell execution policy:

powershell.exe -ep Bypass .\cwiccs.ps1 -report

Unblock files

Unlock files:

Get-ChildItem <cwiccs-master folder path> -recurse | Unblock-File

Use in GPO

Command:

c:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Script parameters:

-ExecutionPolicy Bypass <path to shared folder>\cwiccs.ps1

How to Self Sign

Get-ChildItem -Path C:\Share\cwiccs-master\*.ps1 -Recurse | Set-AuthenticodeSignature -Certificate (Get-ChildItem -Path Cert:\CurrentUser\My\ -CodeSigningCert)

Additional info:

• https://sys-adm.in/programming/powershell-menu/882-powershell-kak-sozdat-sertifikat-i-podpisat-skript.html

Use PSExec

You can use PSExec utility:

PsExec.exe -s -i @c:\Share\servers.txt -e cmd /c "powershell -ExecutionPolicy Bypass \\dc01\Share\cwiccs-master\cwiccs.ps1"

or:

PsExec.exe -s -i @c:\Share\servers.txt Powershell -File \\dc01\Share\cwiccs-master\cwiccs.ps1

Available options:

- cwiccs.ps1 [-autofix] [-report] [-elevate] [-admin] [-profile] <profilename> [-profilelist] [-help]
- [-elevate] and [-admin] arguments it is same (made for convenience)

Operating Modes

CWiCCS can works with two modes:

1. from simple user
2. from elevated (Administrator) mode

-autofix option can works only from elevated mode

Profiles

You can define own profile. CWiCCS use as default DEFAUL profile. Defined profiles:

• Features
• Gpo
• Ports
• Services
• Software

Contribing

You can send me feature requests to forum.sys-adm.in with new topic which contains #cwiccs tag

Info

• Russian Article - CWiCCS (Check Windows and Control Configs and Security) - PowerShell инструмент для проверки и контроля Windows конфигураций