BSidesKC 2018 - Josh Rickard - Securing Windows with (some) Group Policy
Channel: BSidesKC
Date: 2018-06-16

When you buy a house what's the first thing you do? Me, I replace the locks. It’s the same with operating systems. Just because you installed the OS, doesn’t mean it’s secure. You need to configure/harden it!

Group Policy exists in almost every modern business environment. Many organizations either do not use it or do not use it as extensively as they should.

Do you understand Group Policy processing? Did you know you can manage both Active Directory groups and user rights? What about running Scheduled Tasks and do you even Manage Services, bro? Why do all your Administrative accounts have extra permissions like Debug Programs? And why the hell are you afraid of AppLocker?

Remember, Group Policy is an ENTERPRISE scale registry editor.