Questions tagged [security-policy]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2 votes
1 answer
32 views

Why my WDAC policy created using Event Viewer logs based on FilePath rule isn't working?

I'm trying to understand why my WDAC policy is not letting the programs I allow-listed using Event Viewer logs, to run. This is how I made my WDAC Policy allow list based on Event Viewer audit logs: ...
  • 23
0 votes
0 answers
63 views

I can't get Windows Defender Application Control policy working in Windows 11

On Windows 11, I made a WDAC policy with WDAC Wizard and added it to Group Policy, restarted the PC and still the policy isn't being enforced. Here is the test policy I made: <?xml version="1....
  • 23
-2 votes
2 answers
111 views

its possible, and how if yes, create exceptions for ValidateAdminCodeSignatures registry value enabled?

modifying the ValidateAdminCodeSignatures value contained in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System Windows enforce PKI signature checks on any interactive ...
  • 7
1 vote
1 answer
45 views

MSpaint won't open in Run console(win+r), while it opens well in CMD console

I run(win+r) mspaint frequently and it became a habit that I don't want to change. After Windows update some days ago, running mspaint resulted in permission error. I cannot revert Windows update ...
  • 139
1 vote
1 answer
609 views

Firefox allow HTTP URLs (and not force HTTPS)

tl;dr I want to browse an http-based URL but Firefox will not let me. A local network HTTP server is at http://host (port 80) and the corresponding HTTPS server is at https://host (port 443). When I ...
1 vote
3 answers
127 views

Windows 10: How to require login on startup but NOT resume from sleep

Is it possible to have Windows 10 (Pro) require login on startup and reboot but NOT wake from sleep or power-saving screen off? Thanks
  • 13
0 votes
0 answers
191 views

Deny Interactive Logon but not UAC/runas for Win10 admin

I can add a user to the security rights "Deny Interactive Login", this will not allow this specific user to use the Login Screen. However it also denys the user the UAC prompt logins. This ...
  • 1,098
0 votes
2 answers
55 views

How do some special programs enforce policy-like settings upon Chrome?

There's this parental control app called Qustodio. Upon installation, it manages to enforce a setting upon Chrome, namely that Safesearch is permanently enabled. How does it manage to do this? And ...
0 votes
0 answers
69 views

Restrict commands in Linux shell

Is there an option like Set-ExecutionPolicy in Linux shell which can be used to restrict commands and scripts? Set-ExecutionPolicy is used in PowerShell: https://docs.microsoft.com/en-us/powershell/...
  • 101
0 votes
1 answer
449 views

How to block certain apps (say games) except on weekends (Windows 10)

I am aware that applications can be blocked using 'Local Security Policy'. But how to combine it with Task Scheduling. I cannot find my way around the Task Scheduler. Any other workaround is ...
0 votes
0 answers
25 views

Looking for a system to handle internal control execution [duplicate]

We are a fast growing company that needs to suddenly meet requirements by external auditors, in order to pass IT security guidelines. As part of the guidelines, we need to ensure that various internal ...
  • 1
0 votes
1 answer
388 views

RDP saved credantials doesn't work

I'm trying to connect to a domain computer there is a message: "the server's authentication policy does not allow requests using saved credentials" I tried to search for the solution on the ...
0 votes
1 answer
79 views

Windows10 - How to force login to network share (adminshare)?

I come to you with a topic of forcing login to other PC where somebody wants to access C$ (adminshare). I have situation that everybody in domain are able to access my \localhost\C$ without providing ...
  • 1
0 votes
0 answers
21 views

Is there a way to determine which applications are covered by a company's security policy?

I've connected my personal laptop to my work account and they have a security policy in place. Under "Applications" it's a list of guids that I want to link to an actual application name. ...
  • 113
1 vote
0 answers
144 views

How to prevent a Java-process from writing to filesystem?

We discovered, that a vendor-provided Java-program, meant to serve files over HTTP(S) -- in response to GET-requests -- will also happily accept POST-requests, creating new files and overwriting ...
1 vote
1 answer
64 views

How to disable user tracking cookies

I borrowed a laptop from my friend who is network administrator, he installed a tracking cookie in my system and he knows everything I do on laptop. Every time I make any payment or transaction he ...
0 votes
1 answer
390 views

"Windows cannot access the specified device, path, or file" crashes all Windows 10 apps immediately

I've been having this problem for a day or two now. Every time I try to open any Windows 10 App or App Service (Groovy, Realtek Audio Manager, Photo Viewer, wsreset.exe), I'm greeted with "Windows ...
1 vote
2 answers
4k views

How to enable PowerShell script execution?

I would like to execute a script. Unfortunely my system refuses to do that (from an elevated prompt): PS C:\Users\x\Desktop> .\Set-CustomPresence.ps1 .\Set-CustomPresence.ps1: File C:\Users\x\...
  • 2,530
1 vote
2 answers
4k views

How do I remove the "Reset Password" option from the Windows 10 login screen?

I've installed Windows 10 Professional on a PC with only one account, a local administrator. This PC needs to be as secure as possible and it will also never be attached to a Microsoft account. The ...
0 votes
0 answers
4k views

Group policy to grey out macros security setting

I am after GPO to prevent Microsoft Office macro security settings to be changed by users i.e. restricting my users from being able to mock around with Macro Settings in: Options > Trust Center > ...
  • 1
0 votes
0 answers
1k views

Win 10 locations services locked to off -- how can I unlock them?

I have a personal Thinkpad P1 running Windows 10 Pro (version 1909, build 18363.535). I would like to turn on Location Services so that I can turn on Find My Device. However, when I go to Settings>...
1 vote
1 answer
1k views

Bitlocker with TPM but without USB key?

I have Windows 10 x64 version 1903 build 18362.418. Recently I have added a TPM module (specification version is 2.0) to my machine and as far as I can tell it is working properly: its Status in tpm....
  • 231
3 votes
1 answer
867 views

Windows Defender Application Control prevents Windows to boot after second restart (signed policy)

Hy everyone! I want to lock down some Windows 10 Terminals so that they can only run approved Software but keep the possibility to update this software. My plan was to make use of the new Feature of ...
  • 31
0 votes
1 answer
139 views

How can I give a non-administrator permission to alter local security policy on Windows?

I'm working with a service that creates AD accounts. This service is not an administrator (and I don't want it to be) - but it needs to be able to give the newly created accounts the Log in as a Batch ...
  • 121
2 votes
2 answers
2k views

What are the most compatible special characters for login/passwords?

As you would know, most password policy for apps and services require to set a password including a special character. When setting a password for SSO/LDAP, password has to be compatible with all ...
-3 votes
1 answer
241 views

What is the difference between object access and file (system) access in Windows 10?

Regarding auditing specifically. When I look at 'Audit object access' it says: This security setting determines whether the OS audits user attempts to access non-Active Directory objects.. (...
1 vote
0 answers
96 views

Disabled Local Policies:Audit Policy, but Event Viewer is still displaying Security Logs

I disabled all types of auditing for both successes and failures in: Local Security Policy > Local Policies > Audit Policy but when I go to Event Viewer > Windows Logs > Security, logs are still ...
  • 111
0 votes
2 answers
79 views

External users need access to our domain

We built an application that is configured for single sign-on using our AD with SAML. We use Duo for 2FA. Hence, all users in our domain can access that app with their regular work accounts. However,...
  • 141
1 vote
2 answers
2k views

Set PowerShell Execution Policy for a service account

I would like to adjust the PowerShell Execution Policy for a service account, i.e. the IIS user (or let alone those new SSIS virtual accounts). However, it looks like you can only adjust the policy ...
  • 1,532
1 vote
2 answers
5k views

SceCli 0x57 Password Policy Event 1202

A bit of background. I have a small network of 10 computers (2 DCs and 8 laptops). The DCs crashed when security came an implemented new policies and we had to rebuild them. We had to rejoin the ...
  • 395
0 votes
1 answer
829 views

Enable "audit process tracking" using batch file

I'm following this post and trying to enable Audit process tracking. Local Security Policy > Local Policies > Audit Policy > Double Click Audit process tracking and enable. I'm hoping for a ...
  • 187
2 votes
2 answers
433 views

Origin Policy violation on google.by pages

Starting from today I'm constantly getting this error when trying to search something at google.by: Well, well, well. What do we have here? An Origin Policy violation. And what do we not have? ...
0 votes
1 answer
889 views

Local Security Policy Cannot Change Security Level

Today when I was testing Local group policy I set security level disallow to Set as default Now the button is disable and I am unable to run any kind of executable in my pc. and see this message ...
0 votes
1 answer
96 views

Local policy control in ImageMagick

In ImageMagick, is there any way to control policy locally? Something like ~/.imagemagick/policy.xml. Update: $ dpkg -l imagemagick Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-...
0 votes
1 answer
37 views

Which privileges/settings are responsible so standard user can start a service? [duplicate]

My code works fine on one computer but the same code generates error code 5 (access denied) on another computer. Essentially ::OpenService() call fails because of the flag SERVICE_START because the ...
  • 1,621
0 votes
1 answer
193 views

Windows Command prompt - Allow user / user group to run a specific command

I want to allow a specific user group the right to run format command. I have checked Microsoft documentation and this is what I have found : You must be a member of the Administrators group to ...
0 votes
0 answers
160 views

Windows 10 Local Security Settings

Major problem: I wanted to set up a highly locked-down account (can only open Google Chrome) parallel to a normal admin account that can do anything. I fired up secpol.msc, and on the Enforcement ...
0 votes
1 answer
53 views

Company Computers all have stuck policies

Our company used to be managed by an MSP. We had NO on premise DC/AD but we do use Azure. The problem is somehow, now that the MSP is gone, all the computers have "group policies" for updates etc. I ...
0 votes
0 answers
41 views

Security policies setting keeps being changed

I edited the following security policy setting through secpol.msc: Local Policies -> User Rights Assigment -> Change the System Time and removed all users from it, so that nothing, not even LOCAL ...
  • 101
0 votes
0 answers
431 views

Prevent applications to write to windows registry

Is there a possibility for me to see uac promt every time some app trying to edit registry? Maybe run all apps in low integrity level by default or set writing to registry to high integrity? The ...
0 votes
1 answer
105 views

Gpo lockscreen issue

For our organisation we are using lockscreen GPO's to control acces for the users. Most users have a period of 2 minutes before their screen locks, but there are some who require 4 minutes. The issue ...
  • 1
3 votes
2 answers
14k views

Is Constrained Language mode enabled by Default?

Is Constrained Language mode enabled in Powershell by default? in latest Windows 10 FCU build, up-to-date
1 vote
0 answers
31 views

Windows 7 - Do you want to open this file? Terminate with extreme prejudice [duplicate]

Windows 7 asks me that question every time I go to do anything with a file I downloaded from the net. Is there a way to disable that annoying popup for all files, new and old, for all times, no ...
0 votes
0 answers
1k views

Interactive logon: Require Domain Controller authentication to unlock

Interactive logon: Require Domain Controller authentication to unlock Scenario: I was logged in to Windows 7 x64 Enterprise N SP1 domain joined desktop machine connected to corporate network using ...
  • 11
1 vote
1 answer
2k views

User Rights Assignment Back To Not Defined

Is it possible to put a Local Policy User Rights Assignment back to Not Defined? There is not a checkbox to mark it as Not Defined. Is it possible to set any of the User Rights Assignments back to Not ...
  • 395
0 votes
1 answer
5k views

Can my employer track my home computer while I remote desktop using it to work computer [closed]

I often connect to my work computer remotely when I am at home using my home PC(the work computer is at home with me on internal IP 192.168.xx.xx). I then connect to VPN from my RDPed work computer. ...
0 votes
1 answer
172 views

How to debug failed WMI logins

I can connect to the target machine using wbemtest, but when I try connecting using an application based on J-Interop with the same credentials, the connection fails. I'm trying to figure out why. I ...
  • 1,418
2 votes
1 answer
2k views

How to enable FIPS compliance setting without Local Security Policy on Windows 10 Home?

I'm having a problem running some software where a feature doesn't work because the cryptographic algorithm being used isn't FIPS validated. Here's an excerpt of the error indicating that: 'X' ...
  • 183
0 votes
2 answers
62 views

What reason could a company have for preventing users from changing their passwords

If a user wants to change their password they have to either let the IT department generate a random one or else they have to tell them the new password over the phone. Either way the IT department ...
  • 1
2 votes
1 answer
867 views

Don't block files downloaded from a trusted site

I have a 3rd party program that downloads updates for itself from a specific location on the Net and then runs them. After being migrated to Windows 10, this stopped working because, apparently, the ...
  • 1,831