[wpkg-users] Applying software restriction policies via WPKG...

[Marco Gaiarin]

Mandi! Dafydd Jones (techneg.it)
  In chel di` si favelave...

> yes, I have done exactly that after being hit by Cryptolocker back in late
> 2013.
> The key for me is to use a couple of little-known Microsoft tools to apply
> local group policy in scriptable form.
> The tools are described  here: 
> http://supportishere.com/how-to-apply-local-group-policy-settings-silently-using-the-importregpol-exe-and-apply_lgpo_delta-exe-utilities/

Interesting how Microsoft ''unofficially'' produce many set of tools
that do barely the same things, in different way.

I'm using (with WPKG) LocalGPO:
	http://www.grouppolicy.biz/2011/03/introducing-microsoft-security-compliance-manager-v2/

that have the advantage that can use the MLGPO:

	http://technet.microsoft.com/en-us/library/cc766291%28WS.10%29.aspx


> So, you set up the GPOs/SRP on a test machine, run the tool to convert the GPO
> into textual form and then reapply to production machines using wpkg. It's a
> pretty blunt method but has done the trick for me over the past year.

...but i'm intrigued by your ''textual form''; LocalGPO use some sort
of ''binary blob''...


Anyway, surely this way works. But it is still, for me, suboptimal for
use with WPKG because there's no way to ''check'' for effectiveness.

I tent to use direct registry editing, if possible, just because i can
check that, and so be sure that is effective.


Anyway, thanks.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''                    http://www.sv.lnf.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
    http://www.lanostrafamiglia.it/25/index.php/component/k2/item/123
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)