Microsoft Security Baselines Blog

Learn more:  aka.ms/baselines    |    Download the Security Compliance Toolkit:  aka.ms/SCT

Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community
Options
3,406
Rick_Munck on Jun 14 2024 07:22 AM
3,470
Rick_Munck on May 20 2024 08:03 AM
4,129
Rick_Munck on Apr 26 2024 02:09 PM
4,437
Rick_Munck on Mar 27 2024 08:22 AM
5,751
Rick_Munck on Mar 01 2024 06:14 AM
7,635
Rick_Munck on Feb 14 2024 08:19 AM
12K
Rick_Munck on Dec 14 2023 05:19 PM
11.8K
Rick_Munck on Dec 14 2023 03:39 PM
12.7K
Rick_Munck on Nov 10 2023 06:36 AM
53.7K
Rick_Munck on Oct 31 2023 10:09 AM
12.4K
Rick_Munck on Oct 15 2023 02:42 PM
16.9K
Rick_Munck on Sep 18 2023 01:24 PM
12.3K
Rick_Munck on Aug 21 2023 02:51 PM
12.7K
Rick_Munck on Jul 24 2023 08:08 AM
20.6K
Rick_Munck on Jun 29 2023 07:00 AM
20.1K
Rick_Munck on Jun 05 2023 10:55 AM
15K
Rick_Munck on May 06 2023 06:19 AM
16.1K
Rick_Munck on Apr 07 2023 06:00 AM
12.3K
Rick_Munck on Mar 14 2023 05:33 AM
13.9K
Rick_Munck on Feb 13 2023 05:18 AM
15K
Rick_Munck on Jan 17 2023 06:01 AM
19.5K
Rick_Munck on Dec 06 2022 06:47 PM
14.7K
Rick_Munck on Nov 17 2022 12:59 PM
61.2K
Rick_Munck on Oct 18 2022 10:10 AM
11.8K
Rick_Munck on Oct 04 2022 09:00 AM
233K
Rick_Munck on Sep 20 2022 10:01 AM
11.7K
Rick_Munck on Sep 02 2022 08:00 AM
13.1K
Rick_Munck on Aug 08 2022 08:30 AM
16.2K
Rick_Munck on Jun 24 2022 07:37 AM
27.4K
Rick_Munck on Jun 14 2022 09:13 AM

Latest Comments

Basically, the Registry Policy (registry.pol) file format, which is used to deliver the majority of Group Policy settings, is a sequence of registry commands. Most of the time the commands set a registry value, but they can also be used to create a key, delete a specific value, or delete all values ...
0 Likes
Thanks for this updated version! I'm returning to it after a couple of other projects, and am now using it at a new client.In the Excel sheets I have exported, I find some entries such as "[[[create key]]], [[[delete]]] and [[[delete all values]]]". I cannot find the meaning of these entries documen...
0 Likes
@KrisP120 - but why waste time and effort with pushing out that script when the simple Enabled/Disabled setting in the "MS Security Guide" ADMX does it correctly (and more sensibly)?
3 Likes
@mdeklavon : Please try to deploy the below script forcing type REG_SZ instead of DWORD on both the nodes to mitigate CVE-2013-3900.# Specify the registry path and values$registryPath = "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config"$registryValues = @{"EnableCertPaddingCheck" = "1"} # Set t...
0 Likes
@AaronMargosis_Tanium, thank you so much for the extra information and explaining how Windows processes the data! Seeing Microsoft insist in multiple documents that it is REG_SZ had me thinking something in the backend required it. This is what I get for not testing. Thank you for helping me us the ...
0 Likes