Hardening Windows Installations - Video Catch-Up

In an attempt to start the Catch-Up series for these videos, I recorded a video last week, which is uploaded to YouTube, but never got around to posting it here. The attempted process didn't go as planned, due to a lack of failure to plan.

During this last week I had some time to perform research, test, and apply a workaround. Utilizing this link revealed the relevant PowerShell script (Props to the author for this solution! Would have been stuck without it.) As shown in the video, it had to be further customized to create a usable Virtual Machine for my environment.

As noted in the video, while I do not claim to be a virtualization expert (not the point of these articles), I had to modify the code further, which is contained below.

$VMPath = Read-Host -Prompt "Please provide the path to store the VM"
New-VM -Name $VMName -Generation 2 -MemoryStartupBytes 4096MB -SwitchName $SwitchName -Path $VMPath -NewVHDPath $VMPath\$VMName\virtualdisk\VHD.vhdx -NewVHDSizeBytes 127000MB
Set-VM -Name $VMName -ProcessorCount 4 -AutomaticCheckpointsEnabled $false
Set-VMKeyProtector -VMName $VMName -NewLocalKeyProtector
Enable-VMTPM -VMName $VMName

And finally, the completed video where I put start putting this security baseline together by following the blog. Unfortunately, I realized there were a few points I missed, but I tie them together in the video.


273 Words

2024-07-21