Active Directory Policies

Restrict anonymous access to Shares and Named pipes via GPO

In networked environments, especially in enterprise settings, securing communication channels and shared resources is crucial for maintaining data integrity and privacy. A critical aspect of this security is to prevent anonymous enumeration of Named Pipes and Shares, which can be exploited by unauthorized users to gain sensitive information about network resources. This article provides a…
Read more
Active Directory Policies

GPO to prevent sending unencrypted passwords to Third-Party SMB Servers

In a networked environment, especially in enterprise settings, safeguarding sensitive data, including passwords, is a critical aspect of cybersecurity. One significant risk is the transmission of unencrypted passwords to third-party Server Message Block (SMB) servers. This article provides a detailed guide for system administrators on creating a Group Policy Object (GPO) to prevent the sending of…
Read more
Active Directory Policies

GPO to detect application installations and prompt for Elevation

In an enterprise environment, controlling software installation is vital to maintain system integrity, security, and compliance. Group Policy in Windows provides a powerful way to manage this. One effective approach is to create a Group Policy Object (GPO) that detects application installations and prompts for administrative elevation. This ensures that only authorized applications are installed…
Read more
Active Directory Policies

Automatically deny elevation requests from standard users via GPO

In enterprise environments, maintaining strict control over user privileges is key to ensuring network security and operational efficiency. One aspect of this is managing elevation requests – particularly, automatically denying such requests from standard users. This article will guide system administrators through the process of creating a Group Policy Object (GPO) to achieve this, thereby…
Read more
Active Directory Policies

Configure UAC Behaviour for Admin Approval Mode via GPO

User Account Control (UAC) is a fundamental security feature in Windows environments. It helps mitigate the impact of malware by requiring approval for changes to the system, even when made by administrators. This article provides a comprehensive guide for system administrators on creating a Group Policy Object (GPO) to configure UAC to request approval for elevation, even for administrators…
Read more