Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security-policy]

The tag has no usage guidance.

0
votes
1answer
29 views

How can I give a non-administrator permission to alter local security policy on Windows?

I'm working with a service that creates AD accounts. This service is not an administrator (and I don't want it to be) - but it needs to be able to give the newly created accounts the Log in as a Batch ...
0
votes
2answers
85 views

What are the most compatible special characters for login/passwords?

As you would know, most password policy for apps and services require to set a password including a special character. When setting a password for SSO/LDAP, password has to be compatible with all ...
0
votes
0answers
10 views

.htAccess File & CSP implementation

I am Using Cpanel Through NameCheap Web Hosting & am trying to work on a site. When trying to Write out a Content Security Policy there are 2 seperate .htaccess files. One in the Main root ...
-3
votes
1answer
34 views

What is the difference between object access and file (system) access in Windows 10?

Regarding auditing specifically. When I look at 'Audit object access' it says: This security setting determines whether the OS audits user attempts to access non-Active Directory objects.. (...
1
vote
0answers
16 views

Disabled Local Policies:Audit Policy, but Event Viewer is still displaying Security Logs

I disabled all types of auditing for both successes and failures in: Local Security Policy > Local Policies > Audit Policy but when I go to Event Viewer > Windows Logs > Security, logs are still ...
0
votes
2answers
25 views

External users need access to our domain

We built an application that is configured for single sign-on using our AD with SAML. We use Duo for 2FA. Hence, all users in our domain can access that app with their regular work accounts. However,...
1
vote
2answers
95 views

Set PowerShell Execution Policy for a service account

I would like to adjust the PowerShell Execution Policy for a service account, i.e. the IIS user (or let alone those new SSIS virtual accounts). However, it looks like you can only adjust the policy ...
0
votes
0answers
20 views

Limit the user possibility of remote access to a group of servers

I'm trying to configure the Windows Active Directory (AD) to limit the Remote Desktop Access of a group of users to a group of server inside my network. To achieve this I've created a security policy ...
0
votes
1answer
237 views

SceCli 0x57 Password Policy Event 1202

A bit of background. I have a small network of 10 computers (2 DCs and 8 laptops). The DCs crashed when security came an implemented new policies and we had to rebuild them. We had to rejoin the ...
0
votes
1answer
54 views

Enable “audit process tracking” using batch file

I'm following this post and trying to enable Audit process tracking. Local Security Policy > Local Policies > Audit Policy > Double Click Audit process tracking and enable. I'm hoping for a ...
0
votes
0answers
14 views

How restrict and monitor applications access to files and resources on a PC?

I can not find, as everywhere is only restricting the users. But I need the exact opposite: grant user maximum control over machine and maximaly control every application on the PC. Namely: I would ...
0
votes
0answers
17 views

Can you restrict the actions of an unconfined_t process with a custom SELinux policy?

Assuming you're running a Linux distro with SELinux enabled on it under enforcing mode, is it possible to write and compile a policy for it that restricts all unconfined_t processes running on the ...
1
vote
0answers
73 views

Difference between secedit.exe , auditpol.exe and LGPO.exe [closed]

I can't get the difference between theses three utilities. Which one would be the most recommended to set some event policies ? As I understood, secedit can be used for legacy audit policies. Is it ...
2
votes
2answers
408 views

Origin Policy violation on google.by pages

Starting from today I'm constantly getting this error when trying to search something at google.by: Well, well, well. What do we have here? An Origin Policy violation. And what do we not have? ...
0
votes
1answer
125 views

Local Security Policy Cannot Change Security Level

Today when I was testing Local group policy I set security level disallow to Set as default Now the button is disable and I am unable to run any kind of executable in my pc. and see this message ...
0
votes
1answer
59 views

Local policy control in ImageMagick

In ImageMagick, is there any way to control policy locally? Something like ~/.imagemagick/policy.xml. Update: $ dpkg -l imagemagick Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-...
0
votes
1answer
25 views

Which privileges/settings are responsible so standard user can start a service? [duplicate]

My code works fine on one computer but the same code generates error code 5 (access denied) on another computer. Essentially ::OpenService() call fails because of the flag SERVICE_START because the ...
0
votes
1answer
39 views

Windows Command prompt - Allow user / user group to run a specific command

I want to allow a specific user group the right to run format command. I have checked Microsoft documentation and this is what I have found : You must be a member of the Administrators group to ...
0
votes
0answers
116 views

Windows 10 Local Security Settings

Major problem: I wanted to set up a highly locked-down account (can only open Google Chrome) parallel to a normal admin account that can do anything. I fired up secpol.msc, and on the Enforcement ...
0
votes
1answer
38 views

Company Computers all have stuck policies

Our company used to be managed by an MSP. We had NO on premise DC/AD but we do use Azure. The problem is somehow, now that the MSP is gone, all the computers have "group policies" for updates etc. I ...
0
votes
0answers
34 views

Security policies setting keeps being changed

I edited the following security policy setting through secpol.msc: Local Policies -> User Rights Assigment -> Change the System Time and removed all users from it, so that nothing, not even LOCAL ...
0
votes
0answers
40 views

Prevent applications to write to windows registry

Is there a possibility for me to see uac promt every time some app trying to edit registry? Maybe run all apps in low integrity level by default or set writing to registry to high integrity? The ...
0
votes
1answer
68 views

Gpo lockscreen issue

For our organisation we are using lockscreen GPO's to control acces for the users. Most users have a period of 2 minutes before their screen locks, but there are some who require 4 minutes. The issue ...
1
vote
2answers
5k views

Is Constrained Language mode enabled by Default?

Is Constrained Language mode enabled in Powershell by default? in latest Windows 10 FCU build, up-to-date
1
vote
0answers
28 views

Windows 7 - Do you want to open this file? Terminate with extreme prejudice [duplicate]

Windows 7 asks me that question every time I go to do anything with a file I downloaded from the net. Is there a way to disable that annoying popup for all files, new and old, for all times, no ...
0
votes
0answers
128 views

How can i force firefox to execute only EV digitally signed javascript?

Here’s why the epidemic of malicious ads grew so much worse last year Forced redirects from Zirconium group push phony malware and fake Flash updates. DAN GOODIN - 1/23/2018, 5:00 AM Malicious ...
0
votes
0answers
360 views

Interactive logon: Require Domain Controller authentication to unlock

Interactive logon: Require Domain Controller authentication to unlock Scenario: I was logged in to Windows 7 x64 Enterprise N SP1 domain joined desktop machine connected to corporate network using ...
1
vote
1answer
706 views

User Rights Assignment Back To Not Defined

Is it possible to put a Local Policy User Rights Assignment back to Not Defined? There is not a checkbox to mark it as Not Defined. Is it possible to set any of the User Rights Assignments back to Not ...
0
votes
0answers
2k views

Windows 10 group policy to disable wifi for non-admin users

I have setup two standard user accounts on a Dell laptop with Windows 10 installed. I would like to add a group policy that denies wireless devices only to non-admin users. Wireless devices must be ...
0
votes
1answer
2k views

Can my employer track my home computer while I remote desktop using it to work computer [closed]

I often connect to my work computer remotely when I am at home using my home PC(the work computer is at home with me on internal IP 192.168.xx.xx). I then connect to VPN from my RDPed work computer. ...
0
votes
1answer
150 views

How to debug failed WMI logins

I can connect to the target machine using wbemtest, but when I try connecting using an application based on J-Interop with the same credentials, the connection fails. I'm trying to figure out why. I ...
2
votes
1answer
2k views

How to enable FIPS compliance setting without Local Security Policy on Windows 10 Home?

I'm having a problem running some software where a feature doesn't work because the cryptographic algorithm being used isn't FIPS validated. Here's an excerpt of the error indicating that: 'X' ...
0
votes
2answers
52 views

What reason could a company have for preventing users from changing their passwords

If a user wants to change their password they have to either let the IT department generate a random one or else they have to tell them the new password over the phone. Either way the IT department ...
1
vote
1answer
390 views

Don't block files downloaded from a trusted site

I have a 3rd party program that downloads updates for itself from a specific location on the Net and then runs them. After being migrated to Windows 10, this stopped working because, apparently, the ...
0
votes
0answers
63 views

the system adds inbound firewall exceptions and modifies user-defined settings

Thank you in advance for your help! please ask me missing information, this is new to me this kind of on-line community. problem: to stop the event described bellow event description: this event ...
2
votes
2answers
2k views

Restricting a program's access to the Windows registry

Is it possible to prevent a certain program from accessing the Windows registry? I know there are ACLs to lock out a user, but what about per-executable control?
0
votes
2answers
18k views

GPO Denied (Security Filter) not applying

I am having an issue in my company. I have a GPO, and one group in security filter, lets name it group X. In my delegation, I set the permissions to X (Allow Read and Allow Apply Group Policy). The ...
0
votes
0answers
20 views

Customising and manipulating Local Policies in non-AD network

I'm running a small LAN mainly of clients running Windows 8.1 Pro/Enterprise. I've used GPEdit/SecPol MSC and equivalent reg keys to manipulate local policies and items listed as being able to be set ...
1
vote
0answers
99 views

How is it possible to transfer Internet Explorer (11) security settings without registry?

I have set up a PC with Internet Explorer 11 and its security settings to let it work with the customer's Web Application. I now want to transfer these IE settings - mainly security setting - so that ...
4
votes
1answer
7k views

Change audit policy through the Registry

I'm developing an application to read audit event log entries. But I'm stuck on my home notebook with Windows 10 Home and I can't start gpedit.msc or secpol.msc. Thus I have to enable logon audit ...
0
votes
0answers
521 views

Configure Local Policies:Security Options:Network security on Windows Home (7 or later) [duplicate]

I need to configure a Windows 7 Home machine to connect to a VPN Server. This requires the following configuration: Local Policies > Security Options Network Security: Minimum session security for ...
2
votes
1answer
253 views

Setting audit policy on any Windows version

Is it possible to set an object audit policy on any version of Windows? I can do it on Enterprise, but wanted to know if it was possible on Home Premium (or any version of Windows without group policy)...
-2
votes
1answer
91 views

Configuring security policy under Windows 7 Pro

We are trying to setup application security policy in Windows 7 Pro. I Have enabled the system's local policy with configuration below: {Policy sample} Name Type Security Level Description ...
0
votes
1answer
301 views

Unable to access port remotely for AWS machine although security group appears to allow it

I have used the spark ec2/spark-ec2 script to launch an AWS cluster. It was launched, I am able to ssh into the master node, and spark is running - notably including the web-ui at port 8080: $ ps ...
1
vote
1answer
52 views

Does Windows 8.1 filter spoofed packets, or packets with bad checksums?

I recently started a software security class. I expect to be required to craft and send packets; yet I read somewhere my Windows 8.1 installation filters packets based on a valid checksum. Is this ...
5
votes
2answers
2k views

Who has the rights to shutdown a Windows machine remotely?

The question is about the shutdown command with /m \\MACHINE switch, which can be used to shut down (reboot, sleep etc.) a Windows machine remotely. In my case I'm dealing with a local home network ...
1
vote
0answers
496 views

Totally Disable Java 8 Security

Ever since Java 8, running java requires going through the java control panel, adding an exception to the site list, and restarting firefox. And even with an exception in the site list, it still ...
2
votes
0answers
835 views

Enabling welcome screen Windows 7 Embedded

I want the list of available users (without the hidden admin account etc) displayed. To facilitate an easier login experience. Things I have tried: Security policy editor: secpol | Local Policies | ...
1
vote
0answers
291 views

Deny acess to file-shares (SMB)?

There are security policies like: Deny logon locally Deny logon on through Remote Desktop Services Deny access this computer from network Is there any policy to deny specific users/groups to access ...
0
votes
2answers
1k views

Can't disable password complexity windows 8.1 home

I have a simple Windows 8.1 Home Edition PC, with a local account (no email associated with user). When I try to change password it MUST meet complexity requirements (upper, lower, special, character) ...