How does the open-source PowerShell script provided in the article handle both enabling and disabling anonymous shares?

The script `Invoke-BuildAnonymousSMBServer` automates all the registry, group policy, and sharing changes. In enable mode, it performs the five steps mentioned in the command-line section. In disable mode, it reverses each change: disables the share, deactivates the Guest user, removes the `EveryoneIncludesAnonymous` registry value, deletes the `NullSessionShares` entry, and re-adds Guest to the deny network logon policy. The script handles the edge case where the deny policy line may be missing by inserting it correctly. It is tested on Windows 7 through Server 2016.