Enable protection for speculative execution side-channel vulnerabilities

Version: 2.2.15
Creator Name: Rotem Agmon
Date Created: 2018-01-04
Date Modified: 2018-01-11
Scripting language: PS
Download Count: 58

Adds the required registry keys to enable the mitigations on the target computer. Requires the relevant Microsoft patch installed on the target computer. For more inforrmation: https://support.microsoft.com/en-us/help/4072698
Tags: security, powershell, Intel, vulnerabilities, Meltdown, Spectre

The Script

powershell.exe -Command "Set-ItemProperty -Path Registry::'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management' -Name FeatureSettingsOverride -Value 0"
powershell.exe -Command "Set-ItemProperty -Path Registry::'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management' -Name FeatureSettingsOverrideMask -Value 3"
powershell.exe -Command "Set-ItemProperty -Path Registry::'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Virtualization' -Name MinVmVersionForCpuBasedMitigations -Value '1.0'"