Apply_LGPO_Delta and ImportRegPol updated

I discovered an “unintended feature” in the Apply_LGPO_Delta and ImportRegPol utilities, which I have fixed in the versions now posted to the LGPO Utilities page.  The “feature” (OK, the “bug”) allowed commands to set a registry value and to delete that registry value not to overwrite each other in the resulting registry policy file. This…

0

Viewing and Comparing IE Security Zone Settings

The Security tab of the Internet Explorer Properties dialog shows security settings for the Internet, Intranet, Trusted Sites and Restricted Sites zones.  However: It doesn’t show settings for the Local Machine (Computer) zone, nor for Local Machine Zone Lockdown (LMZL). When machine settings or other policies are in effect, most of the Security Zones UI…

0

Source code for New and Updated Local Group Policy utilities

Visual Studio 2008 source and project files for the new ImportRegPol utility and the updated Set_FDCC_LGPO and Apply_LGPO_Delta utilities for managing Local Group Policy Objects. Note that these are all now Visual Studio 2008 projects. [Update Jan 15 2010:  new versions released — see the LGPO Utilities page]

2

New and Updated Local Group Policy Utilities

A customer requested an addition to the local group policy toolset posted on the FDCC blog.  While working on the new utility, I needed to upgrade the other two.  The full set is attached to this post, with documentation.  The source code for all of them is attached to a separate post. The new utility,…

0

Set_FDCC_LGPO.exe v1.06, Visual C++ project sources

Visual Studio 2005 project files and source code for Set_FDCC_LGPO.exe v1.06 is attached to this blog post. [Removed, as a newer version is available — bookmark the landing page for the most up-to-date-links.]

2

Set_FDCC_LGPO updated: v1.06

Set_FDCC_LGPO has been updated to reflect the updated GPO content on NIST’s download page.  The FDCC settings have not changed.  The updates contain only corrections to the downloads to more closely adhere to the FDCC settings. The updated Set_FDCC_LGPO is attached to this blog post.  (This time I also remembered to include the readme.htm in…

1

Apply_LGPO_Delta v1.01, source code

Visual Studio 2005 project and source code files for Apply_LGPO_Delta v1.01 is attached to this blog post. [Attachment removed, as a newer version is available — bookmark the landing page for the most up-to-date-links.]

1

Apply_LGPO_Delta updated, v1.01

Apply_LGPO_Delta is a utility for automating the management of local group policy — administrative templates and security templates.  First posted here, it has been updated with the same fix that was applied to Set_FDCC_LGPO to prevent the 0x80070020 sharing-violation error from occurring. Documentation is in the download.  The sample starter files have been updated, including…

2

Set_FDCC_LGPO.exe v1.05, source code

Visual Studio 2005 project files and source code for Set_FDCC_LGPO.exe v1.05 is attached to this blog post. (This blog doesn’t support multiple file attachments per post…) [Attachment removed, as a newer version is available — bookmark the landing page for the most up-to-date-links.]

4

Set_FDCC_LGPO updated: v1.05

[2009-04-15:  Attachment removed.  Bookmark this page for the latest versions of these utilities.]  The utility for applying FDCC configuration settings en masse to a computer has been updated: The 0x80070020 sharing-violation error code that occasionally occurred appears to be due to contention over the registry.pol files between Set_FDCC_LGPO (which is writing to them) and winlogon.exe, which is reading…

3