Skip to content

Commit 0a26dcc

Browse files
kdvhhkdvhh
committed
all task enabled by default
1 parent a0a05bd commit 0a26dcc

1 file changed

Lines changed: 23 additions & 23 deletions

File tree

‎Configs/TasksSequence_HardenAD.xml‎

Lines changed: 23 additions & 23 deletions
Original file line numberDiff line numberDiff line change
@@ -1374,7 +1374,7 @@ Blocks anonymous access to SAM database.">
13741374
<!--Parameter:
13751375
Target Functional Level. Possibe values: "2008R2","2012","2012R2","2016","Last" -->
13761376
<UseParameters>Last</UseParameters>
1377-
<TaskEnabled>No</TaskEnabled>
1377+
<TaskEnabled>Yes</TaskEnabled>
13781378
<TaskDescription>Upgrade `(DomainFunctionalLevel` </TaskDescription>
13791379
</Id>
13801380
<!-- Upgrade Forest Functional Level -->
@@ -1386,7 +1386,7 @@ Blocks anonymous access to SAM database.">
13861386
<!--Parameter:
13871387
Target Functional Level. Possibe values: "2008R2","2012","2012R2","2016","Last" -->
13881388
<UseParameters>Last</UseParameters>
1389-
<TaskEnabled>No</TaskEnabled>
1389+
<TaskEnabled>Yes</TaskEnabled>
13901390
<TaskDescription>Upgrade `(ForestFunctionalLevel` </TaskDescription>
13911391
</Id>
13921392
<!-- SET MS-DS-MACHINEACCOUNTQUOTA TO 0 -->
@@ -1395,31 +1395,31 @@ Blocks anonymous access to SAM database.">
13951395
<!--Parameter:
13961396
new ms-DS-MachineAccountQuota value -->
13971397
<UseParameters>0</UseParameters>
1398-
<TaskEnabled>No</TaskEnabled>
1398+
<TaskEnabled>Yes</TaskEnabled>
13991399
<TaskDescription>set `(msDSMachineAccountQuota` to `(0` to restrict domain junction</TaskDescription>
14001400
</Id>
14011401
<!-- ENABLE THE AD RECYCLE BIN -->
14021402
<Id Number="020" Name="Activate Active Directory Recycle Bin">
14031403
<CallingFunction>Set-ADRecycleBin</CallingFunction>
14041404
<UseParameters>
14051405
</UseParameters>
1406-
<TaskEnabled>No</TaskEnabled>
1406+
<TaskEnabled>Yes</TaskEnabled>
14071407
<TaskDescription>activate the `(AD Recycle Bin` optional feature</TaskDescription>
14081408
</Id>
14091409
<!-- CONFIGURE ALL AD SITE LINKS WITH THE NOTIFY OPTIONS -->
14101410
<Id Number="030" Name="Set Notify on every Site Links">
14111411
<CallingFunction>Set-SiteLinkNotify</CallingFunction>
14121412
<UseParameters>
14131413
</UseParameters>
1414-
<TaskEnabled>No</TaskEnabled>
1414+
<TaskEnabled>Yes</TaskEnabled>
14151415
<TaskDescription>set `(notify` on every `(Site Links</TaskDescription>
14161416
</Id>
14171417
<!-- ACTIVATE THE GPO CENTRAL STORE -->
14181418
<Id Number="040" Name="Set GPO Central Store">
14191419
<CallingFunction>Set-GpoCentralStore</CallingFunction>
14201420
<UseParameters>
14211421
</UseParameters>
1422-
<TaskEnabled>No</TaskEnabled>
1422+
<TaskEnabled>Yes</TaskEnabled>
14231423
<TaskDescription>set `(GPO Central Store` and update `{adm` and `{admx` files</TaskDescription>
14241424
</Id>
14251425
<!-- GENERATE NEW ADMINISTRATION ORGANIZATIONAL UNIT -->
@@ -1428,7 +1428,7 @@ Blocks anonymous access to SAM database.">
14281428
<!--Parameter:
14291429
class name from OrganizationalUnits | ouTree in this document -->
14301430
<UseParameters>HardenAD_ADMIN</UseParameters>
1431-
<TaskEnabled>No</TaskEnabled>
1431+
<TaskEnabled>Yes</TaskEnabled>
14321432
<TaskDescription>set `(Administration` organizational unit</TaskDescription>
14331433
</Id>
14341434
<!-- GENERATE NEW TIER 0 ORGANIZATIONAL UNIT -->
@@ -1437,7 +1437,7 @@ Blocks anonymous access to SAM database.">
14371437
<!--Parameter:
14381438
class name from OrganizationalUnits | ouTree in this document -->
14391439
<UseParameters>HardenAD_PROD-T0</UseParameters>
1440-
<TaskEnabled>No</TaskEnabled>
1440+
<TaskEnabled>Yes</TaskEnabled>
14411441
<TaskDescription>set `(Tier 0` organizational unit</TaskDescription>
14421442
</Id>
14431443
<!-- GENERATE NEW TIER 1 and 2 ORGANIZATIONAL UNIT -->
@@ -1446,7 +1446,7 @@ Blocks anonymous access to SAM database.">
14461446
<!--Parameter:
14471447
class name from OrganizationalUnits | ouTree in this document -->
14481448
<UseParameters>HardenAD_PROD-T1and2</UseParameters>
1449-
<TaskEnabled>No</TaskEnabled>
1449+
<TaskEnabled>Yes</TaskEnabled>
14501450
<TaskDescription>set `(Tier 1 and Tier 2 combo` organizational unit</TaskDescription>
14511451
</Id>
14521452
<!-- GENERATE NEW LEGACY ORGANIZATIONAL UNIT -->
@@ -1455,7 +1455,7 @@ Blocks anonymous access to SAM database.">
14551455
<!--Parameter:
14561456
class name from OrganizationalUnits | ouTree in this document -->
14571457
<UseParameters>HardenAD_PROD-LEGACY</UseParameters>
1458-
<TaskEnabled>No</TaskEnabled>
1458+
<TaskEnabled>Yes</TaskEnabled>
14591459
<TaskDescription>set `(Tier Legacy` organizational unit</TaskDescription>
14601460
</Id>
14611461
<!-- GENERATE NEW DEFAULT OBJECTS LOCATION TREE -->
@@ -1464,7 +1464,7 @@ Blocks anonymous access to SAM database.">
14641464
<!--Parameter:
14651465
class name from OrganizationalUnits | ouTree in this document -->
14661466
<UseParameters>PROVISIONNING-EN</UseParameters>
1467-
<TaskEnabled>No</TaskEnabled>
1467+
<TaskEnabled>Yes</TaskEnabled>
14681468
<TaskDescription>set `(Provisioning` organizational unit</TaskDescription>
14691469
</Id>
14701470
<!-- RELOCATE NEW USER/GROUP OBJECT LOCATION -->
@@ -1476,7 +1476,7 @@ Blocks anonymous access to SAM database.">
14761476
<!--Parameter:
14771477
OU distinguishedName. Use RootDN to automatically fill-in the domain name -->
14781478
<UseParameters>OU=users,OU=provisioning,RootDN</UseParameters>
1479-
<TaskEnabled>No</TaskEnabled>
1479+
<TaskEnabled>Yes</TaskEnabled>
14801480
<TaskDescription>set `(user objects` default location</TaskDescription>
14811481
</Id>
14821482
<!-- RELOCATE NEW COMPUTER OBJECT LOCATION -->
@@ -1488,46 +1488,46 @@ Blocks anonymous access to SAM database.">
14881488
<!--Parameter:
14891489
OU distinguishedName. Use RootDN to automatically fill-in the domain name -->
14901490
<UseParameters>OU=computers,OU=provisioning,RootDN</UseParameters>
1491-
<TaskEnabled>No</TaskEnabled>
1491+
<TaskEnabled>Yes</TaskEnabled>
14921492
<TaskDescription>set `(computer objects` default location</TaskDescription>
14931493
</Id>
14941494
<!-- GENERATE NEW ADMIN ACCOUNTS ON WHICH THE DELEGATION MODEL WILL WORKS -->
14951495
<Id Number="080" Name="Create administration accounts">
14961496
<CallingFunction>New-AdministrationAccounts</CallingFunction>
14971497
<!-- Parameter: KeePass password for the kdbx database -->
14981498
<UseParameters>H4rd3n@D!!</UseParameters>
1499-
<TaskEnabled>No</TaskEnabled>
1499+
<TaskEnabled>Yes</TaskEnabled>
15001500
<TaskDescription>create `(administration accounts` used by the tier model</TaskDescription>
15011501
</Id>
15021502
<!-- GENERATE NEW ADMIN GROUPS ON WHICH THE DELEGATION MODEL WILL WORKS -->
15031503
<Id Number="090" Name="Create administration groups">
15041504
<CallingFunction>New-AdministrationGroups</CallingFunction>
15051505
<UseParameters>
15061506
</UseParameters>
1507-
<TaskEnabled>No</TaskEnabled>
1507+
<TaskEnabled>Yes</TaskEnabled>
15081508
<TaskDescription>create `(administration groups` used by the tier model</TaskDescription>
15091509
</Id>
15101510
<!-- ACEs DEPLOYMENT FOR DELEGATION MODEL -->
15111511
<Id Number="095" Name="Enforce delegation model through ACEs">
15121512
<CallingFunction>Push-DelegationModel</CallingFunction>
15131513
<UseParameters>
15141514
</UseParameters>
1515-
<TaskEnabled>No</TaskEnabled>
1515+
<TaskEnabled>Yes</TaskEnabled>
15161516
<TaskDescription>Enforce `(Delegation ACEs` used by the tier model</TaskDescription>
15171517
</Id>
15181518
<!-- IMPORT WMI FILTERS -->
15191519
<Id Number="125" Name="Import additional WMI Filters">
15201520
<CallingFunction>Import-WmiFilters</CallingFunction>
15211521
<UseParameters>
15221522
</UseParameters>
1523-
<TaskEnabled>No</TaskEnabled>
1523+
<TaskEnabled>Yes</TaskEnabled>
15241524
<TaskDescription>Import `(WMI filter` to the domain</TaskDescription>
15251525
</Id>
15261526
<!-- LOC ADM TASK DEPLOYMENT SCRIPT UDATE -->
15271527
<!-- <Id Number="127" Name="Update Loca Adm Task deployment scripts">
15281528
<CallingFunction>Set-LocAdmTaskScripts</CallingFunction>
15291529
<UseParameters>SYSVOL\%domaindns%\scripts\LocAdmTask</UseParameters>
1530-
<TaskEnabled>No</TaskEnabled>
1530+
<TaskEnabled>Yes</TaskEnabled>
15311531
<TaskDescription>Update `(LocAdmTask Scripts` to match with the domain name</TaskDescription>
15321532
</Id> -->
15331533
<!-- IMPORT GPOs -->
@@ -1546,7 +1546,7 @@ Blocks anonymous access to SAM database.">
15461546
the Schema Master owner -->
15471547
<!-- IgnoreDcIsSchameOwner will remove this requierment (child domain, etc.) -->
15481548
<UseParameters>ForceDcIsSchemaOwner</UseParameters>
1549-
<TaskEnabled>No</TaskEnabled>
1549+
<TaskEnabled>Yes</TaskEnabled>
15501550
<TaskDescription>Update `(AD Schema` for `[LAPS` and add `(PShell add-on`</TaskDescription>
15511551
</Id>
15521552
<!-- LAPS PERMISSIONS DEPLOYMENT OVER THE DOMAIN -->
@@ -1557,29 +1557,29 @@ Blocks anonymous access to SAM database.">
15571557
<!-- DEFAULT: will apply permission at the root domain level and leave domain admins as the
15581558
only allowed users. -->
15591559
<UseParameters>CUSTOM</UseParameters>
1560-
<TaskEnabled>No</TaskEnabled>
1560+
<TaskEnabled>Yes</TaskEnabled>
15611561
<TaskDescription>Set-up `(LAPS` permissions on the target domain</TaskDescription>
15621562
</Id>
15631563
<!-- LAPS DEPLOYMENT SCRIPT UDATE -->
15641564
<Id Number="136" Name="Update LAPS deployment scripts">
15651565
<CallingFunction>Set-LapsScripts</CallingFunction>
15661566
<!-- Parameter: use NETLOGON or SYSVOL for a dynamic location. Else enter the UNC Path -->
15671567
<UseParameters>NETLOGON\LAPS</UseParameters>
1568-
<TaskEnabled>No</TaskEnabled>
1568+
<TaskEnabled>Yes</TaskEnabled>
15691569
<TaskDescription>Update `(LAPS Scripts` to match with the domain name</TaskDescription>
15701570
</Id>
15711571
<!-- IMPORT SCHEDULE TASKS -->
15721572
<!-- <Id Number="140" Name="Import schedule tasks on the running system">
15731573
<CallingFunction>New-ScheduleTasks</CallingFunction>
15741574
<UseParameters></UseParameters>
1575-
<TaskEnabled>No</TaskEnabled>
1575+
<TaskEnabled>Yes</TaskEnabled>
15761576
<TaskDescription>Import new `(schedule tasks` to the `[running system`</TaskDescription>
15771577
</Id> -->
15781578
<!-- RESET SENSIBLE GROUPS -->
15791579
<!-- <Id Number="150" Name="Reset Group Memberships">
15801580
<CallingFunction>Reset-GroupMembership</CallingFunction>
15811581
<UseParameters></UseParameters>
1582-
<TaskEnabled>No</TaskEnabled>
1582+
<TaskEnabled>Yes</TaskEnabled>
15831583
<TaskDescription>Reset `(groups's membeberships` to the `[trusted list`</TaskDescription>
15841584
</Id> -->
15851585
</Sequence>

0 commit comments

Comments
 (0)