[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] bypassing Windows Domain Group Policy Objects

To: full-disclosure@xxxxxxxxxxxxxxxxx
Subject: Re: [Full-disclosure] bypassing Windows Domain Group Policy Objects
From: Michael Holstein <michael.holstein@xxxxxxxxxxx>
Date: Thu, 27 Apr 2006 10:37:37 -0400

System Key: [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System]
Value Name: DisableGPO
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = default, 1 = disable group policy)


strike that .. production releases ignore this.

Other possible solution, cripple gpupdate.exe (XP) or secedit.exe (2K)through permissions (eg: remove 'localsystem:execute'). Deleting themwill just trigger WFP to replace.


/mike.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Follow-Ups:
- Re: [Full-disclosure] bypassing Windows Domain Group Policy Objects
  - From: Exibar
- Re: [Full-disclosure] bypassing Windows Domain Group Policy Objects
  - From: James Eaton-Lee

References:
- RE: [Full-disclosure] Internet Explorer User Interface Races, Redeux
  - From: Antczak, Ed
- [Full-disclosure] bypassing Windows Domain Group Policy Objects
  - From: Exibar
- Re: [Full-disclosure] bypassing Windows Domain Group Policy Objects
  - From: Michael Holstein

Prev by Date: Re: [Full-disclosure] What is wrong with schools these days?
Next by Date: Re: [Full-disclosure] bypassing Windows Domain Group Policy Objects
Previous by thread: Re: [Full-disclosure] bypassing Windows Domain Group Policy Objects
Next by thread: Re: [Full-disclosure] bypassing Windows Domain Group Policy Objects
Index(es):
- Date
- Thread