Home

What Is PowerSTIG

PowerSTIG is a PowerShell module published to the PowerShell Gallery and updated on a quarterly cadence. It provides PowerShell DSC composite resources for applying DISA STIG security baselines.

When you use PowerSTIG, you work with high-level DSC resources (for example, WindowsClient, DotNetFramework, and Edge) instead of authoring individual STIG rules by hand. For example, to secure a Microsoft Server 2022 endpoint, you can apply the Server 2022 PowerSTIG DSC resource in a simple configuration file that, when compiled, produces hundreds of security settings that can be applied to one or many machines.

Learn More

Microsoft Learning Resources

• What is a PowerShell Module
• What is a PowerShell DSC Resource (v2)
• What is a Composite Resource

Installing PowerSTIG

PowerSTIG is published on PowerShell Gallery.

Steps

1. Open PowerShell ISE or a PowerShell prompt as Administrator (PowerShell v5).

2. Install the module:

   Install-Module -Name PowerStig

3. If prompted about an untrusted repository, select Yes.

4. Confirm the install path:

   C:\Program Files\WindowsPowerShell\Modules\PowerSTIG
   

5. Validate the install:

   Get-DscResource -Module PowerStig

Once installed, you can author and compile DSC configurations that reference PowerSTIG resources.

Install Screenshots

Install command example:

Untrusted repository prompt:

Installed module location example:

Validation command output example:

Next steps: Working with composite resources