Basically, the Registry Policy (registry.pol) file format, which is used
to deliver the majority of Group Policy settings, is a sequence of
registry commands. Most of the time the commands set a registry value,
but they can also be used to create a key, delete a specific value, or
delete all values ...
Thanks for this updated version! I'm returning to it after a couple of
other projects, and am now using it at a new client.In the Excel sheets
I have exported, I find some entries such as "[[[create key]]],
[[[delete]]] and [[[delete all values]]]". I cannot find the meaning of
these entries documen...
@KrisP120 - but why waste time and effort with pushing out that script
when the simple Enabled/Disabled setting in the "MS Security Guide" ADMX
does it correctly (and more sensibly)?
@mdeklavon : Please try to deploy the below script forcing type REG_SZ
instead of DWORD on both the nodes to mitigate CVE-2013-3900.# Specify
the registry path and values$registryPath =
"HKLM:\Software\Microsoft\Cryptography\Wintrust\Config"$registryValues =
@{"EnableCertPaddingCheck" = "1"} # Set t...
@AaronMargosis_Tanium, thank you so much for the extra information and
explaining how Windows processes the data! Seeing Microsoft insist in
multiple documents that it is REG_SZ had me thinking something in the
backend required it. This is what I get for not testing. Thank you for
helping me us the ...
Latest Comments