Securing Windows with Group Policy

Explore effective strategies for securing Windows environments using Group Policy in this comprehensive conference talk from ShowMeCon 2018. Delve into the fundamentals of Group Policy, including its applications across local systems, domains, and individual rooms. Learn to implement restricted groups, manage logging alerts, and control user rights. Discover techniques for handling highly privileged accounts, client privileges, and security access tokens. Examine the intricacies of task scheduling, service management, and process mitigation. Gain insights into PowerShell security, app blocking, and various condition-based policies. Understand the broader implications of Group Policy in maintaining a robust Windows security posture.

Syllabus

Intro
Background
Who Uses Group Policy
Local System
Old
Site
Domain
Group Policy
Group Policy to Individual Rooms
Group Policy Overview
Restricted Groups
Logging Alerts
Managing Restricted Groups
Managing Users
Managing User Rights
Highly Privileged Accounts
Client Privilege
Security Access Tokens
Incode
Debug Programs
Carbon Black Petia
Long Gun Rights
Allow Log On
Local User Groups
Task Scheduler
Home Automation
Local Service
Immediate Scheduled Tasks
Run PowerShell
Secure Code Execution
Unity Managing Services
The Illuminati
Windows Services
Reduce Footprint
Group Policies
Processing Mitigation
Data Execution Prevention
Internet Explorer
Process Mitigation
Scripts
PowerShell
App blocker
Hash condition
Path condition
Publish condition
What is Group Policy
Sad News
Contact Information