Posted in News Tutorials

How to find and use WMI values for Group Policy Filtering

The Ask the Performance Team has published a WMI Code Creator tool that allows queries your local WMI repository on your computer. This too can be useful if you want to find the WMI values to use with a WQL query filter for your Group Policy Objects (GPO). The tool itself does not actually create a WQL query for WMI…

Continue Reading...
Posted in News Tip

Get TechNet Subscription 28% discount with promo code

Microsoft has just released a new TechNet Subscription discount code for any IT Pro that wants to evaluate and test Microsoft software. This is a great way to get your hands on and test Microsoft software for a business to make sure its the right solution for your needs. If you are a Group Policy Administrator this is a great…

Continue Reading...
Posted in News Security

KB978207 (MS10-002) Internet Explorer “Google China” patch is out now

As I have previously mentioned there has been a lot of press lately where some hackers took advantage of some holes in IE and Adobe Reader to hack Google’s systems in China. As a result Microsoft have burnt the midnight oil and rushed out an Out of Cycle patch for Internet Explorer to resolve this issues even thought this issues…

Continue Reading...
Posted in News

Microsoft release two new Group Policy hot fixes

Microsoft just released two new hot fixes for the Group Policy Preferences (GPP) client-side extensions and the Group Policy Management Console (GPMC). Group Policy preferences client-side extension hotfix rollup for Windows Vista This hotfix resolves numerous issues with the client-side extensions for Vista and required Service Pack 1 or 2 to be installed. Download from http://support.microsoft.com/?kbid=977983 You cannot create a…

Continue Reading...
Posted in News Security

NSW Government uses Group Policy AppLocker to build an ‘unhackable’ Netbook

The NSW Department of Education and Training (DET) has come out and said that due to the new features in Windows 7 they were able to essentially build a computer to survive “the most hostile environment you can roll computers into”.

“DET also uses the AppLocker functionality within Windows 7 to dictate which applications can be installed on the device.”

AppLocker is a new feature with Windows 7 that allows IT administrators to lock down application to specific product and/or vendors with having to specific the specific version. This feature allows them to only allow a specific white list of application on the computers. This essentially prevents anyone from running any non-authorised code on the computer thus making it VERY difficult to prevent people hacking the computer with third-party tools or malware. What is really nice with this feature is that it does not stop computer from running applications after they have been updated with hot fixes and service packs as AppLocker works on the digital signature on the file and not a hash of the file itself. This makes the IT Administrators overhead far less as they no longer need to add every possible version of an application to the white list when they want it to work.

While DET does seem to have done a lot in securing the devices to the Nth degree I still reckon it wont take long for someone to find some hack or workaround. I think the itNews headline is just inviting trouble by calling it “Unhackable”. I call it the “If something is said to be “unhackable” then it is far from being secure” maximum. ( More info about Security Maximum’s can be found at http://whysecurityfails.com/maxims.html ). But don’t get me wrong I don’t think that this will be a flaw in the technology but more a security issue with them forgetting to lock down some or even leaking the default BIOS password.

Source: NSW seeks to build ‘unhackable’ netbook network – Security – Technology – News – iTnews.com.au

Technorati Tags: Group Policy,AppLocker

Continue Reading...
Posted in News

PolicyMaker to Group Policy Preference migration tool released. Finally!

  After about 18 months since Group Policy Preference were released with Windows Server 2008 Microsoft has finally release a migration tool to convert you PolicyMaker Group Policies to Group Policy Preferences. Here is the link to download the tool http://www.microsoft.com/downloads/details.aspx?FamilyID=35791cb6-710b-48c4-aaa1-90db170bcf2a&displaylang=en Source: Group Policy Team Blog : How do I migrate PolicyMaker Items to Group Policy Preference Items?

Continue Reading...