Questions tagged [security-policy]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
172 views

Supplemental WDAC policy Doesn't Override Block Rule from Base WDAC Policy (Microsoft Recommended Block Rules)

I'm working on creating a Windows Defender Application Control (WDAC) supplemental policy which supplements a base policy. The base policy is merged with the Microsoft Recommended Block Rules. This ...
0 votes
1 answer
96 views

Can this CORS error be avoided on Windows 7?(I tried both Chrome and Firefox)

Access to fetch at 'https://ip-51-105-104-76.dditscdn.com/api/8/envelope/? sentry_key=...&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.51.2' from origin 'https://www....
10 votes
5 answers
23k views

Firefox allow HTTP URLs (and not force HTTPS)

tl;dr I want to browse an http-based URL but Firefox will not let me. A local network HTTP server is at http://host (port 80) and the corresponding HTTPS server is at https://host (port 443). When I ...
0 votes
0 answers
181 views

Disabling changing the time zone does not work in Windows 10

I have a computer which is used by several users. I would like to disable for these users the option of changing the time zone the system uses (both via the "clicking way" as well as via the ...
0 votes
1 answer
2k views

I can't get Windows Defender Application Control policy working in Windows 11

On Windows 11, I made a WDAC policy with WDAC Wizard and added it to Group Policy, restarted the PC and still the policy isn't being enforced. Here is the test policy I made: <?xml version="1....
0 votes
1 answer
199 views

Triggering a scheduled task using process ID (Windows 10)

How can I trigger a task in the Task Scheduler using a process ID that I get from the Task Manager? Sort of similiar to the event ID from the Event Viewer. My first solution was to use the event ID ...
183 votes
18 answers
680k views

How can I prevent a policy-enforced screen lock in Windows?

Our corporate BOFH imposes the screen lock setting with a ridiculously short delay. It's frustrating and counterproductive. Is there a way to prevent the automatic screen lock? I would assume there ...
0 votes
0 answers
473 views

Use WDAC to block an EXE except when called by specific program? Possible?

Context: When Windows Defender Application Control blocks a program, in the Event Viewer log it also shows which application/process tried to open the blocked exe. For example it says this, followed ...
2 votes
2 answers
5k views

What are the most compatible special characters for login/passwords?

As you would know, most password policy for apps and services require to set a password including a special character. When setting a password for SSO/LDAP, password has to be compatible with all ...
2 votes
2 answers
1k views

Why my WDAC policy created using Event Viewer logs based on FilePath rule isn't working?

I'm trying to understand why my WDAC policy is not letting the programs I allow-listed using Event Viewer logs, to run. This is how I made my WDAC Policy allow list based on Event Viewer audit logs: ...
3 votes
2 answers
2k views

Windows Defender Application Control prevents Windows to boot after second restart (signed policy)

Hy everyone! I want to lock down some Windows 10 Terminals so that they can only run approved Software but keep the possibility to update this software. My plan was to make use of the new Feature of ...
0 votes
0 answers
210 views

macports' php82-fpm unable to read a php file due to system policy

I try to set up a LAMP server on my M1 macMini, and after getting thru several configuration issues, I've been able to start apache2 and php82-fpm in fastcgi mode, but Apple's system Policy seems to ...
15 votes
3 answers
46k views

Why setting Powershell to set-executionpolicy remotesigned fails?

Using Win7-32bit and Powershell ISE I tried to run a just saved script (let's say containing a simple cls). I got the error, that execution of scripts is forbidden with the usual "get-help ...
1 vote
0 answers
520 views

How can I edit the Users Privileges with Local Security Policy in Windows Server 2016?

I am creating a pentest scenario and I want that a user has the SeImpersonatePrivilege. So, I install the Windows Server 2016 in a virtual machine. Then, I created the Administrator user and a common ...
0 votes
1 answer
2k views

Windows 10 forbids installation of Intel I225-V Ethernet Controller driver

I have an Intel I225-V Ethernet Controller, which allows up to 2.5Gbit/s, but apparently causes major issues in many places. On Linux, it works out of the box. On Windows, the Ethernet interface is ...
-1 votes
2 answers
426 views

its possible, and how if yes, create exceptions for ValidateAdminCodeSignatures registry value enabled?

modifying the ValidateAdminCodeSignatures value contained in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System Windows enforce PKI signature checks on any interactive ...
3 votes
3 answers
5k views

Restricting a program's access to the Windows registry

Is it possible to prevent a certain program from accessing the Windows registry? I know there are ACLs to lock out a user, but what about per-executable control?
1 vote
1 answer
166 views

MSpaint won't open in Run console(win+r), while it opens well in CMD console

I run(win+r) mspaint frequently and it became a habit that I don't want to change. After Windows update some days ago, running mspaint resulted in permission error. I cannot revert Windows update ...
118 votes
7 answers
321k views

Re-enable extensions not coming from Chrome Web Store on Chrome v35+ (with enhanced security)

Does anybody know how to re-enable your own extensions after they were disabled by the Chrome v35 update? (Mostly greasemonkey scripts in my case, thus simple .js files previously drag-n-dropped in ...
1 vote
3 answers
1k views

Windows 10: How to require login on startup but NOT resume from sleep

Is it possible to have Windows 10 (Pro) require login on startup and reboot but NOT wake from sleep or power-saving screen off? Thanks
1 vote
2 answers
140 views

How do some special programs enforce policy-like settings upon Chrome?

There's this parental control app called Qustodio. Upon installation, it manages to enforce a setting upon Chrome, namely that Safesearch is permanently enabled. How does it manage to do this? And ...
0 votes
0 answers
240 views

Restrict commands in Linux shell

Is there an option like Set-ExecutionPolicy in Linux shell which can be used to restrict commands and scripts? Set-ExecutionPolicy is used in PowerShell: https://docs.microsoft.com/en-us/powershell/...
0 votes
1 answer
2k views

How to block certain apps (say games) except on weekends (Windows 10)

I am aware that applications can be blocked using 'Local Security Policy'. But how to combine it with Task Scheduling. I cannot find my way around the Task Scheduler. Any other workaround is ...
0 votes
0 answers
26 views

Looking for a system to handle internal control execution [duplicate]

We are a fast growing company that needs to suddenly meet requirements by external auditors, in order to pass IT security guidelines. As part of the guidelines, we need to ensure that various internal ...
2 votes
2 answers
11k views

How to enable PowerShell script execution?

I would like to execute a script. Unfortunely my system refuses to do that (from an elevated prompt): PS C:\Users\x\Desktop> .\Set-CustomPresence.ps1 .\Set-CustomPresence.ps1: File C:\Users\x\...
0 votes
1 answer
2k views

RDP saved credantials doesn't work

I'm trying to connect to a domain computer there is a message: "the server's authentication policy does not allow requests using saved credentials" I tried to search for the solution on the ...
0 votes
1 answer
360 views

Windows10 - How to force login to network share (adminshare)?

I come to you with a topic of forcing login to other PC where somebody wants to access C$ (adminshare). I have situation that everybody in domain are able to access my \localhost\C$ without providing ...
0 votes
0 answers
24 views

Is there a way to determine which applications are covered by a company's security policy?

I've connected my personal laptop to my work account and they have a security policy in place. Under "Applications" it's a list of guids that I want to link to an actual application name. ...
1 vote
0 answers
313 views

How to prevent a Java-process from writing to filesystem?

We discovered, that a vendor-provided Java-program, meant to serve files over HTTP(S) -- in response to GET-requests -- will also happily accept POST-requests, creating new files and overwriting ...
6 votes
1 answer
11k views

How do I set a Windows 7 Security Policy option to "not defined"?

I have two identical machines running Windows 7, and I'm trying to replicate the security policy settings of one on the other (these are the settings under secpol.msc). One machine has a setting ...
2 votes
1 answer
3k views

Blocking incoming connections from IP in windows XP

I have a request to block any incoming connections from a block of IP addresses but they would like to leave the outgoing traffic alone (no block). Is there a way to do this in Windows XP? The ...
1 vote
1 answer
1k views

Bitlocker with TPM but without USB key?

I have Windows 10 x64 version 1903 build 18362.418. Recently I have added a TPM module (specification version is 2.0) to my machine and as far as I can tell it is working properly: its Status in tpm....
1 vote
1 answer
72 views

How to disable user tracking cookies

I borrowed a laptop from my friend who is network administrator, he installed a tracking cookie in my system and he knows everything I do on laptop. Every time I make any payment or transaction he ...
41 votes
11 answers
292k views

How to view all IE Trusted Sites when security settings are managed?

If the Security Zones for Internet Explorer are managed by my system administrator, the list of Trusted Sites is disabled and I cannot scroll through the list. Is there a way I can view the full list ...
0 votes
1 answer
552 views

"Windows cannot access the specified device, path, or file" crashes all Windows 10 apps immediately

I've been having this problem for a day or two now. Every time I try to open any Windows 10 App or App Service (Groovy, Realtek Audio Manager, Photo Viewer, wsreset.exe), I'm greeted with "Windows ...
1 vote
2 answers
7k views

How do I remove the "Reset Password" option from the Windows 10 login screen?

I've installed Windows 10 Professional on a PC with only one account, a local administrator. This PC needs to be as secure as possible and it will also never be attached to a Microsoft account. The ...
0 votes
0 answers
6k views

Group policy to grey out macros security setting

I am after GPO to prevent Microsoft Office macro security settings to be changed by users i.e. restricting my users from being able to mock around with Macro Settings in: Options > Trust Center > ...
0 votes
0 answers
2k views

Win 10 locations services locked to off -- how can I unlock them?

I have a personal Thinkpad P1 running Windows 10 Pro (version 1909, build 18363.535). I would like to turn on Location Services so that I can turn on Find My Device. However, when I go to Settings>...
1 vote
2 answers
7k views

SceCli 0x57 Password Policy Event 1202

A bit of background. I have a small network of 10 computers (2 DCs and 8 laptops). The DCs crashed when security came an implemented new policies and we had to rebuild them. We had to rejoin the ...
2 votes
2 answers
1k views

Setting audit policy on any Windows version

Is it possible to set an object audit policy on any version of Windows? I can do it on Enterprise, but wanted to know if it was possible on Home Premium (or any version of Windows without group policy)...
0 votes
1 answer
448 views

How can I give a non-administrator permission to alter local security policy on Windows?

I'm working with a service that creates AD accounts. This service is not an administrator (and I don't want it to be) - but it needs to be able to give the newly created accounts the Log in as a Batch ...
0 votes
2 answers
2k views

Can't disable password complexity windows 8.1 home

I have a simple Windows 8.1 Home Edition PC, with a local account (no email associated with user). When I try to change password it MUST meet complexity requirements (upper, lower, special, character) ...
0 votes
2 answers
8k views

Where can I find the local password policies?

I would like to export the password policy keys to a .reg file so I can apply them across multiple systems easily. Are the password policies stored in the registry? If so, where?
0 votes
1 answer
1k views

How can I lockdown a computer so the user cannot minimize or move the browser window? [duplicate]

I am trying to setup a computer with a browser page. The webpage allows people to enter their email address and submit a form. However, it is intended to be a kiosk. I don't want people to be able ...
1 vote
1 answer
166 views

How can I apply policies to Standard accounts?

How can I apply policies and restrict features, such as removing common program groups from the Start Menu, of Standard accounts without affecting Administrator accounts? I found a similar question ...
1 vote
1 answer
2k views

Enable "audit process tracking" using batch file

I'm following this post and trying to enable Audit process tracking. Local Security Policy > Local Policies > Audit Policy > Double Click Audit process tracking and enable. I'm hoping for a ...
1 vote
2 answers
3k views

Set PowerShell Execution Policy for a service account

I would like to adjust the PowerShell Execution Policy for a service account, i.e. the IIS user (or let alone those new SSIS virtual accounts). However, it looks like you can only adjust the policy ...
-3 votes
1 answer
361 views

What is the difference between object access and file (system) access in Windows 10?

Regarding auditing specifically. When I look at 'Audit object access' it says: This security setting determines whether the OS audits user attempts to access non-Active Directory objects.. (...
0 votes
2 answers
299 views

External users need access to our domain

We built an application that is configured for single sign-on using our AD with SAML. We use Duo for 2FA. Hence, all users in our domain can access that app with their regular work accounts. However,...
1 vote
0 answers
236 views

Disabled Local Policies:Audit Policy, but Event Viewer is still displaying Security Logs

I disabled all types of auditing for both successes and failures in: Local Security Policy > Local Policies > Audit Policy but when I go to Event Viewer > Windows Logs > Security, logs are still ...