Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Check how to execute the function Create a Group Policy (experimental) added from v0.91 #50

Open
hitoshi-yamaguchi opened this issue Apr 9, 2024 · 4 comments
Assignees

Comments

@hitoshi-yamaguchi
Copy link

The function Create a Group Policy (experimental) has been added since v0.91. Could you please confirm how to execute it?

Invoke-HardeningKitty -Mode GPO -FileFindingList .\lists\finding_list_0x6d69636b_machine.csv -GPOName HardeningKitty-Machine-01

If you specify an appropriate name in the -GPOName part of the above command, the following error will occur.
Get-GPRegistryValue: I get a message that there is no GPO named xxx in my domain.

Also, if you specify an existing GPO, a message will appear stating that you do not have access rights.

Is it actually a command that creates a domain policy?
How should I specify how to apply it to local policy?

@0x6d69636b 0x6d69636b self-assigned this Apr 12, 2024
@0x6d69636b
Copy link
Member

Please make sure that the user has the permission to create/modify group policies.

The command in your example is correct. Hardening Kitty has currently no support to create local group policies, see #41

@hitoshi-yamaguchi
Copy link
Author

bummer,
I wanted to change the local group policy all at once, but I'm thinking of another method.

@0x6d69636b
Copy link
Member

You can change the settings locally on a system in Hail Mary mode, but your configuration will not be visible in the local Group Policy Editor

@hitoshi-yamaguchi
Copy link
Author

exactry. If you change the local group policy in this state, the one you updated with HailMary will be reverted. I heared that Microsoft doesn't recommend changing the registry directly.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants