Describe "WindowsFeatures" { $windowsFeatures = (Get-ToolsetContent).windowsFeatures $testCases = $windowsFeatures | ForEach-Object { @{ Name = $_.name; OptionalFeature = $_.optionalFeature } } It "Windows Feature is installed" -TestCases $testCases { if ($OptionalFeature) { (Get-WindowsOptionalFeature -Online -FeatureName $Name).State | Should -Be "Enabled" } else { (Get-WindowsFeature -Name $Name).InstallState | Should -Be "Installed" } } it "Check WSL is on path" -Skip:(-not (Test-IsWin19)) { (Get-Command -Name 'wsl') | Should -BeTrue } } Describe "DiskSpace" { It "The image has enough disk space"{ $availableSpaceMB = [math]::Round((Get-PSDrive -Name C).Free / 1MB) $minimumFreeSpaceMB = 18 * 1024 $availableSpaceMB | Should -BeGreaterThan $minimumFreeSpaceMB } } Describe "DynamicPorts" { It "Test TCP dynamicport start=49152 num=16384" { $tcpPorts = Get-NetTCPSetting | Where-Object {$_.SettingName -ne "Automatic"} | Where-Object { $_.DynamicPortRangeStartPort -ne 49152 -or $_.DynamicPortRangeNumberOfPorts -ne 16384 } $tcpPorts | Should -BeNullOrEmpty } It "Test UDP dynamicport start=49152 num=16384" { $udpPorts = Get-NetUDPSetting | Where-Object { $_.DynamicPortRangeStartPort -ne 49152 -or $_.DynamicPortRangeNumberOfPorts -ne 16384 } $udpPorts | Should -BeNullOrEmpty } } Describe "GDIProcessHandleQuota" { It "The GDIProcessHandleQuota value is 20000" { $regPath = "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows" $regPath32 = "HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Windows" (Get-ItemProperty $regPath).GDIProcessHandleQuota | Should -BeExactly 20000 (Get-ItemProperty $regPath32).GDIProcessHandleQuota | Should -BeExactly 20000 } } Describe "Test Signed Drivers" { It "bcdedit testsigning should be Yes"{ "$(bcdedit)" | Should -Match "testsigning\s+Yes" } } Describe "Windows Updates" { It "WindowsUpdateDone.txt should exist" { "$env:windir\WindowsUpdateDone.txt" | Should -Exist } $testCases = Get-WindowsUpdatesHistory | Sort-Object Title | ForEach-Object { @{ Title = $_.Title Status = $_.Status } } It "" -TestCases $testCases { $expect = "Successful" if ( $Title -match "Microsoft Defender Antivirus" ) { $expect = "Successful", "Failure" } $Status | Should -BeIn $expect } }