WINDOWS. AUDIT. Check audit

How to verify the audit policy.

Command: auditpol /get /category:*

Check at Windows 2012 R2
by GoN | Published: June 16, 2017 | Last Updated:

WINDOWS. Migrate SYSVOL to DFS-R

Steps:

The FRS service pass to disable status.

Check at Windows 2012 R2
by GoN | Published: June 15, 2017 | Last Updated:

WINDOWS. Enable Recycle Bin AD

For check if you have enable this feature:

Get-ADOptionalFeature -Filter 'name -like "Recycle Bin Feature"'

If "EnabledScopes" is empty this feature is not enable.

For activate:

[ ] Run "Active Directory Administrative Center"

[ ] Select the Domain al choose "Delected Object"

[ ] For Undeleted one object:

Check at Windows 2012 R2
by GoN | Published: June 7, 2017 | Last Updated: April 9, 2018

WNDOWS. Disable IPv6 at Domain Controles.

Command: regedit

Links: https://support.microsoft.com/es-es/help/929852/how-to-disable-ipv6-or-its-components-in-windows

Other config (I have not been able to prove it yet) is:

Set-ExecutionPolicy -ExecutionPolicy Bypass Get-NetAdapter | Set-NetAdapterBinding -ComponentID ms_tcpip6 -Enabled $false

Links: https://wintelteams.wordpress.com/2017/03/29/ipv6-disable-ps-script/

Check at Windows 2012 R2
by GoN | Published: June 7, 2017 | Last Updated: July 10, 2017