Skip to content

Latest commit

 

History

History
46 lines (41 loc) · 1.51 KB

ROADMAP.md

File metadata and controls

46 lines (41 loc) · 1.51 KB
Raw

Continuous

  • Improved Error Handling

In Progress

  • Rename Modes to something that makes sense

Short Term

  • Report on Template Publishing Status
  • Check for Auditing GPOS, Warn if none found
  • Improved Output: Email, PS Object
  • Check for Elevation before Fixing
  • Automatic remediation of ESC4/ESC5

Medium Term

  • ESC7 coverage
  • Text-Based User Interface
  • Include Reference Material

Long Term

  • Convert from PS Modules/cmdlets to ADSI calls
  • ESC8 Remediation
  • Unit testing (for Jared)
  • ESC7 Remediation
  • Multi-Forest support

Recently Completed

  • Basic ESC3 Remediation
  • Basic ESC3 coverage
  • ACL remediation snippets
  • Add individual CA Hosts to $SafeUsers
  • Add sample output to README.md
  • ESC8 coverage
  • Modes 0 & 1: Headers for Console Output
  • Mode 4: Display snippet and get confirmation before running.
    • Include details about how changes could affect environment.
  • Add Domain Controllers group, ENTERPRISE DOMAIN CONTROLLERS group, to $SafeUsers
  • Add Forest name to "Cert Publishers" and "Administrator" definitions in $SafeOwners and $SafeUsers
  • Update README.md with Examples
  • Script to reset any fixed items
  • Testing of all modes
  • Backup before running Mode 4
  • Strict Mode support
  • RDP Restricted Admin support
  • Convert $SafeOwners and $SafeUsers to SIDs
  • Check for installed Modules on Win 10/11
  • Owner remediation snippets