ROADMAP.md

Continuous

• Improved Error Handling

In Progress

• Rename Modes to something that makes sense

Short Term

• Report on Template Publishing Status
• Check for Auditing GPOS, Warn if none found
• Improved Output: Email, PS Object
• Check for Elevation before Fixing
• Automatic remediation of ESC4/ESC5

Medium Term

• ESC7 coverage
• Text-Based User Interface
• Include Reference Material

Long Term

• Convert from PS Modules/cmdlets to ADSI calls
• ESC8 Remediation
• Unit testing (for Jared)
• ESC7 Remediation
• Multi-Forest support

Recently Completed

• Basic ESC3 Remediation
• Basic ESC3 coverage
• ACL remediation snippets
• Add individual CA Hosts to $SafeUsers
• Add sample output to README.md
• ESC8 coverage
• Modes 0 & 1: Headers for Console Output
• Mode 4: Display snippet and get confirmation before running.
  • Include details about how changes could affect environment.
• Add Domain Controllers group, ENTERPRISE DOMAIN CONTROLLERS group, to $SafeUsers
• Add Forest name to "Cert Publishers" and "Administrator" definitions in $SafeOwners and $SafeUsers
• Update README.md with Examples
• Script to reset any fixed items
• Testing of all modes
• Backup before running Mode 4
• Strict Mode support
• RDP Restricted Admin support
• Convert $SafeOwners and $SafeUsers to SIDs
• Check for installed Modules on Win 10/11
• Owner remediation snippets