param ( [parameter(Mandatory=$false)]$undo = $False ) IF ($undo -eq $False) { If ([System.Environment]::Is64BitOperatingSystem -eq $True) { Write-Output "64bit Detected" Write-Output "Mitigating CVE-2020-0674" takeown /f $env:windir\syswow64\jscript.dll cacls $env:windir\syswow64\jscript.dll /E /P everyone:N takeown /f $env:windir\system32\jscript.dll cacls $env:windir\system32\jscript.dll /E /P everyone:N } Else { Write-Output "32bit Detected" Write-Output "Mitigating CVE-2020-0674" takeown /f %windir%\system32\jscript.dll cacls $env:windir\system32\jscript.dll /E /P everyone:N } } ElseIf ($undo -eq $True){ If ([System.Environment]::Is64BitOperatingSystem -eq $True) { Write-Output "64bit Detected" Write-Output "Disabling mitigation for CVE-2020-0674" cacls $env:windir\system32\jscript.dll /E /R everyone cacls $env:windir\syswow64\jscript.dll /E /R everyone } Else { Write-Output "32bit Detected" Write-Output "Disabling mitigation for CVE-2020-0674" cacls $env:windir\system32\jscript.dll /E /R everyone } }