# Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'

The 'Xbox Live Game Save' service is used for synchronizing game save data with the Xbox Live service. In an enterprise or security-conscious environment, this service is non-essential and should be disabled to reduce the system's attack surface. Disabling unnecessary services minimizes potential vulnerabilities, reduces system resource consumption, and simplifies system management. The audit script checks the current startup type of the 'XblGameSave' service. The remediation script modifies this startup type to the specified value. The recommended state for all hardening levels (Basic, Moderate, and Strict) is 'Disabled' because this service provides no core functionality for a non-gaming workstation. Enabling it offers no benefit and introduces unnecessary complexity and potential risk, making its complete disabling the only logical security recommendation.

## Recommended State Configuration

| Security Level | Value |
|----------------|-------|
| **Basic** | `['Disabled']` |
| **Moderate** | `['Disabled']` |
| **Strict** | `['Disabled']` |
| **Type** | `ENUM` |

## Audit Script Working

PowerShell script that queries the startup type of the 'Xbox Live Game Save' (XblGameSave) service. The script must output only the string representing the current startup type (e.g., 'Disabled', 'Automatic', 'Manual').

## Remediation Script Working

PowerShell script that sets the startup type for the 'Xbox Live Game Save' (XblGameSave) service. The script must accept a single positional command-line argument for the desired state (e.g., 'Disabled'). It must return '$true' on success and '$false' on failure.

