Windows 10: Win10 hardening GPO support for secure desktops

Discus and support Win10 hardening GPO support for secure desktops in Windows 10 Drivers and Hardware to solve the problem; Hello all, long time lurker first time poster on the forums, hopefully this is the correct place to post this. Working on some hardening settings for... Discussion in 'Windows 10 Drivers and Hardware' started by Adam45, Jan 15, 2019.

  1. Adam45 Win User

    Win10 hardening GPO support for secure desktops


    Hello all, long time lurker first time poster on the forums, hopefully this is the correct place to post this. Working on some hardening settings for Win10 desktop machines in a SCIF environment for a client, there's 2 settings I've been wrestling with and haven't found a workaround. They are:

    1. Disabling microphone jack/port

    2. Allow privileged users only write access to CD/DVD and prevent everyone else.

    In group policy preferences not seeing anything for microphone under control panel\devices, there's a policy to disable sound completely and registry hack to disable headphones but nothing for mic. The only option i see is disabling microphone in the BIOS, but that would require altering the image as i don't think BIOS settings can be managed by GPO. As for allowing only privilege users to write to CD/DVD, the only foreseeable option i know of is first setting up a GPO to block CD/DVD access completely, then creating a second "exceptions" GPO to allow this setting and do a security filter to only select privileged users or a security group of users. But this will require two policies for just one setting which i would like to avoid. Thank you in advance for the help *Smile

    :)
     
    Adam45, Jan 15, 2019
    #1
  2. NAZARKA1 Win User

    gpo collusion

    sir,

    do I can link more than one GPO to an OU

    each GPO may be for specific purpose (one for hardening, another for WSUS synch , another for NTP)
     
    NAZARKA1, Jan 15, 2019
    #2
  3. Odiedavis Win User
    Windows Security Screen shutdown/restart with GPO

    Running Win 10 Pro as admin and using GPO for standard users to limit shutdown/restart/hibernate option. GPO restriction works everywhere it should but on Windows Security screen where Power Button is still functional. Could this be a bug? Am an experienced
    GPO user. Have already done SFC and dism as well as Disabled/Not Configured and re Enabled GPO option. Any suggestions? Appreciate any help. Thank you.
     
    Odiedavis, Jan 15, 2019
    #3
  4. ozzyrocks Win User

    Win10 hardening GPO support for secure desktops

    Windows 10 Pro Update Error after hardening

    Hi,

    I have a new installation of Windows 10 Pro and after a few days of use, I am getting this error on Windows Update:

    "There were some problems installing updates, but we'll try again later. If you keep seeing this and want to search the web or contact support for information, this may help: (0x80070426)"

    The background is as follows:

    I have a new Dell XPS 13 laptop. It came with Windows 10 Home, and I upgraded it to Windows 10 Pro because I need to use it for business and need the extra encryption and other features that Home does not provide. I have implemented security hardening on
    the Windows 10 Pro installation following the process documented here: http://hardenwindows10forsecurity.com/

    After completion of the hardening steps (first time round), the above error appeared. I assumed that it was due to my hardening steps, so I tried all sorts of fixes and tweaks to repair it, until I finally restored back to a previous restore point from 2
    days earlier. After the restore, the windows updates were functioning. I then repeated the hardening steps, while testing Windows Update after each major step in the process. Windows Update continued to work fine through the hardening and even worked fine
    after I completed the hardening (the second time). This was yesterday evening when I ended work for the day. Now, this morning (the next day), when I started up my Windows 10 Pro, it is giving the above error once again under Windows Update.

    I am not sure whether this is an issue caused by the hardening, or just a temporary issue that will resolve itself. Can somebody please assist and shed some light on the situation.
     
    ozzyrocks, Jan 15, 2019
    #4
Thema:

Win10 hardening GPO support for secure desktops

Loading...
  1. Win10 hardening GPO support for secure desktops - Similar Threads - Win10 hardening GPO

  2. Security hardening

    in AntiVirus, Firewalls and System Security
    Security hardening: Good day community, I wanna your kind assistance about security hardening. My goal is like that: 1. to encrypt all (hole) drive C and D. 2. install VM ware 16 and use it for other jobs. or for personal purposes. 3. on main OS want to use Tor browser. chrome and Mozila got...
  3. Windows Security Center "Dismiss" through GPO

    in AntiVirus, Firewalls and System Security
    Windows Security Center "Dismiss" through GPO: I am trying to figure out if there's a way to widely distribute the dismissal of a Security Center yellow exclamation point. The most recent nuisance is the tamper protection feature. Our customers are not comfortable with warnings like this and we often get complaints or...
  4. Security/Support Access

    in AntiVirus, Firewalls and System Security
    Security/Support Access: I've spent an hour trying to access support and the only tech I was sent to, repeatedly, maintained that he was not the person to contact for security services. He even gave me links that returned me to his Azure site, so he asked why I contacted him again. When I write...
  5. Windows 10: 0x80073CF6 error, Security Hardened machine / hardened User Profile folder [solved]

    in Microsoft Windows 10 Store
    Windows 10: 0x80073CF6 error, Security Hardened machine / hardened User Profile folder [solved]: I've seen a lot of similar threads with recommendations to try repairs to the windows store and windows update, but since none of the other threads solved my problem I thought I would post this in case it helps anyone else. We were experiencing a problem installing some...
  6. Is there an end date to Win10 Smartphone security support?

    in AntiVirus, Firewalls and System Security
    Is there an end date to Win10 Smartphone security support?: Is there an end date to Win10 Smartphone security support? https://answers.microsoft.com/en-us/windows/forum/all/is-there-an-end-date-to-win10-smartphone-security/ce037796-fedc-43d2-89c5-a71ce99e1003"
  7. GPO

    in Windows 10 Drivers and Hardware
    GPO: So i applied GPO to block removable devices and as a result one of our employees can't access to his internal HDD, his getting "Access Denied". He has windows 10 OS/ Non of our other employees have experienced this problem. Please help....
  8. Win10 hardening GPO support for secure desktops

    in Windows 10 Performance & Maintenance
    Win10 hardening GPO support for secure desktops: Hello all, long time lurker first time poster on the forums, hopefully this is the correct place to post this. Working on some hardening settings for Win10 desktop machines in a SCIF environment for a client, there's 2 settings I've been wrestling with and haven't found a...
  9. Device Security - Standard hardware security not supported

    in AntiVirus, Firewalls and System Security
    Device Security - Standard hardware security not supported: Hi there, I recently replaced my Motherboard, CPU and Ram and now have Windows Defender Security Centre tell me that Standard hardware security not supported. Why is this and what can one do to change this status? Regards, E...
  10. Disable the Volume Icon In Tray Menu Win10 (NOT WITH GPO!)

    in Windows 10 Support
    Disable the Volume Icon In Tray Menu Win10 (NOT WITH GPO!): Hi, guys!Can someone tell how to programmatically disable the system sound icon (or other system icons) in Windows 10 from the tray menu? But not through GPO policy. Because then it is not possible to enable it through the parameters, only also with registry tweak. [img]...

Users found this page by searching for:

  1. hp bios windows 10 hardening