SlideShare a Scribd company logo
Practice - Windows Server Security
Lesson 5
Pasha Mohamed
VDTQT-Hutech
Agenda
Exercise:
 Change Wallpaper using GPO
 Deploy Software using GPO
 Block App using GPO
 Block IE with Group Policy
Lab Model
• 1 Server 2012 promoted to DC
• 1 Client 2010 join domain
Video Change Wallpaper by GPO
Video Deploy Software by GPO
Video Block App using GPO
Block Internet Access with Group
Policy
User Configuration -> Policies -> Administrative Templates -> Windows Components ->
Internet Explorer set the following.
• Disable Changing Automatic Configuration Settings: Set to Enabled
• Prevent Changing Proxy Settings: Set to Enabled
Video Block IE using GPO
More Exercise
• Block app Paint IE using GPO (mspaint.exe)

More Related Content

What's hot

ECMDay2015 - Kenny Buntinx - Tim De Keukelaere - Armoring your mobile workfor...
ECMDay2015 - Kenny Buntinx - Tim De Keukelaere - Armoring your mobile workfor...ECMDay2015 - Kenny Buntinx - Tim De Keukelaere - Armoring your mobile workfor...
ECMDay2015 - Kenny Buntinx - Tim De Keukelaere - Armoring your mobile workfor...
Kenny Buntinx
 
bfx and studio server - Bluebeam eXtreme Conference 2014
bfx and studio server - Bluebeam eXtreme Conference 2014bfx and studio server - Bluebeam eXtreme Conference 2014
bfx and studio server - Bluebeam eXtreme Conference 2014
bluebeamslides
 
Admincenter
AdmincenterAdmincenter
Admincenter
Rajiv Pandey
 
Evento Veeam & Assyrus - 6 Pianificare lato sorgente
Evento Veeam & Assyrus - 6 Pianificare lato sorgenteEvento Veeam & Assyrus - 6 Pianificare lato sorgente
Evento Veeam & Assyrus - 6 Pianificare lato sorgente
Andrea Mauro
 
Weblogic installation
Weblogic installationWeblogic installation
Weblogic installation
Aditya Bhuyan
 
Windows 10 deployment using ConfigMgr and MDT
Windows 10 deployment using ConfigMgr and MDTWindows 10 deployment using ConfigMgr and MDT
Windows 10 deployment using ConfigMgr and MDT
Ronni Pedersen
 
Virtualization auditing & security deck v1.0
Virtualization auditing & security deck v1.0Virtualization auditing & security deck v1.0
Virtualization auditing & security deck v1.0Concentrated Technology
 
Ws08 R2 Itpro Session 4 Virtualization Technologies
Ws08 R2 Itpro Session 4 Virtualization TechnologiesWs08 R2 Itpro Session 4 Virtualization Technologies
Ws08 R2 Itpro Session 4 Virtualization Technologieschenley
 
Introducing Colama: virtual lab infrastructure for Enterprise
Introducing Colama: virtual lab infrastructure for EnterpriseIntroducing Colama: virtual lab infrastructure for Enterprise
Introducing Colama: virtual lab infrastructure for Enterprise
Coriolis Technologies
 
colama EigenBoot
colama EigenBootcolama EigenBoot
colama EigenBoot
Coriolis Technologies
 
Deployment day session 4 deployment using sccm
Deployment day session 4 deployment using sccmDeployment day session 4 deployment using sccm
Deployment day session 4 deployment using sccm
Microsoft TechNet - Belgium and Luxembourg
 
How to setup a fresh Windows Server for a DirectShare EasyDemo
How to setup a fresh Windows Server for a DirectShare EasyDemoHow to setup a fresh Windows Server for a DirectShare EasyDemo
How to setup a fresh Windows Server for a DirectShare EasyDemo
Christian Petrou
 
Tech Ed 2008 Israel Server Management 360
Tech Ed 2008 Israel   Server Management 360Tech Ed 2008 Israel   Server Management 360
Tech Ed 2008 Israel Server Management 360Amit Gatenyo
 
Top Issues For Microsoft Support For Windows Server
Top Issues For Microsoft Support For Windows ServerTop Issues For Microsoft Support For Windows Server
Top Issues For Microsoft Support For Windows Server
Blauge
 
Optimizing windows 8 for virtual desktops - teched 2013 Jeff Stokes
Optimizing windows 8 for virtual desktops - teched 2013 Jeff StokesOptimizing windows 8 for virtual desktops - teched 2013 Jeff Stokes
Optimizing windows 8 for virtual desktops - teched 2013 Jeff Stokes
Jeff Stokes
 

What's hot (19)

Wsus best practices
Wsus best practicesWsus best practices
Wsus best practices
 
ECMDay2015 - Kenny Buntinx - Tim De Keukelaere - Armoring your mobile workfor...
ECMDay2015 - Kenny Buntinx - Tim De Keukelaere - Armoring your mobile workfor...ECMDay2015 - Kenny Buntinx - Tim De Keukelaere - Armoring your mobile workfor...
ECMDay2015 - Kenny Buntinx - Tim De Keukelaere - Armoring your mobile workfor...
 
bfx and studio server - Bluebeam eXtreme Conference 2014
bfx and studio server - Bluebeam eXtreme Conference 2014bfx and studio server - Bluebeam eXtreme Conference 2014
bfx and studio server - Bluebeam eXtreme Conference 2014
 
Admincenter
AdmincenterAdmincenter
Admincenter
 
Evento Veeam & Assyrus - 6 Pianificare lato sorgente
Evento Veeam & Assyrus - 6 Pianificare lato sorgenteEvento Veeam & Assyrus - 6 Pianificare lato sorgente
Evento Veeam & Assyrus - 6 Pianificare lato sorgente
 
Weblogic installation
Weblogic installationWeblogic installation
Weblogic installation
 
Windows 10 deployment using ConfigMgr and MDT
Windows 10 deployment using ConfigMgr and MDTWindows 10 deployment using ConfigMgr and MDT
Windows 10 deployment using ConfigMgr and MDT
 
Virtualization auditing & security deck v1.0
Virtualization auditing & security deck v1.0Virtualization auditing & security deck v1.0
Virtualization auditing & security deck v1.0
 
Ws08 R2 Itpro Session 4 Virtualization Technologies
Ws08 R2 Itpro Session 4 Virtualization TechnologiesWs08 R2 Itpro Session 4 Virtualization Technologies
Ws08 R2 Itpro Session 4 Virtualization Technologies
 
Wsus sample scripts
Wsus sample scriptsWsus sample scripts
Wsus sample scripts
 
Introducing Colama: virtual lab infrastructure for Enterprise
Introducing Colama: virtual lab infrastructure for EnterpriseIntroducing Colama: virtual lab infrastructure for Enterprise
Introducing Colama: virtual lab infrastructure for Enterprise
 
colama EigenBoot
colama EigenBootcolama EigenBoot
colama EigenBoot
 
Deployment day session 4 deployment using sccm
Deployment day session 4 deployment using sccmDeployment day session 4 deployment using sccm
Deployment day session 4 deployment using sccm
 
How to setup a fresh Windows Server for a DirectShare EasyDemo
How to setup a fresh Windows Server for a DirectShare EasyDemoHow to setup a fresh Windows Server for a DirectShare EasyDemo
How to setup a fresh Windows Server for a DirectShare EasyDemo
 
Iis implementation
Iis implementationIis implementation
Iis implementation
 
Tech Ed 2008 Israel Server Management 360
Tech Ed 2008 Israel   Server Management 360Tech Ed 2008 Israel   Server Management 360
Tech Ed 2008 Israel Server Management 360
 
Top Issues For Microsoft Support For Windows Server
Top Issues For Microsoft Support For Windows ServerTop Issues For Microsoft Support For Windows Server
Top Issues For Microsoft Support For Windows Server
 
Optimizing windows 8 for virtual desktops - teched 2013 Jeff Stokes
Optimizing windows 8 for virtual desktops - teched 2013 Jeff StokesOptimizing windows 8 for virtual desktops - teched 2013 Jeff Stokes
Optimizing windows 8 for virtual desktops - teched 2013 Jeff Stokes
 
Virtualization today
Virtualization todayVirtualization today
Virtualization today
 

More from Vietfreelancer Expert

Lesson 2 practice
Lesson 2 practiceLesson 2 practice
Lesson 2 practice
Vietfreelancer Expert
 
Lesson 2 lý thuyết
Lesson 2 lý thuyếtLesson 2 lý thuyết
Lesson 2 lý thuyết
Vietfreelancer Expert
 
Lesson 1 practice
Lesson 1 practiceLesson 1 practice
Lesson 1 practice
Vietfreelancer Expert
 
Lesson 1 lý thuyết
Lesson 1 lý thuyếtLesson 1 lý thuyết
Lesson 1 lý thuyết
Vietfreelancer Expert
 
Lession 2
Lession 2Lession 2
Lesson 1
Lesson 1Lesson 1

More from Vietfreelancer Expert (6)

Lesson 2 practice
Lesson 2 practiceLesson 2 practice
Lesson 2 practice
 
Lesson 2 lý thuyết
Lesson 2 lý thuyếtLesson 2 lý thuyết
Lesson 2 lý thuyết
 
Lesson 1 practice
Lesson 1 practiceLesson 1 practice
Lesson 1 practice
 
Lesson 1 lý thuyết
Lesson 1 lý thuyếtLesson 1 lý thuyết
Lesson 1 lý thuyết
 
Lession 2
Lession 2Lession 2
Lession 2
 
Lesson 1
Lesson 1Lesson 1
Lesson 1
 

Recently uploaded

De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
Product School
 
Essentials of Automations: Optimizing FME Workflows with Parameters
Essentials of Automations: Optimizing FME Workflows with ParametersEssentials of Automations: Optimizing FME Workflows with Parameters
Essentials of Automations: Optimizing FME Workflows with Parameters
Safe Software
 
FIDO Alliance Osaka Seminar: Passkeys at Amazon.pdf
FIDO Alliance Osaka Seminar: Passkeys at Amazon.pdfFIDO Alliance Osaka Seminar: Passkeys at Amazon.pdf
FIDO Alliance Osaka Seminar: Passkeys at Amazon.pdf
FIDO Alliance
 
FIDO Alliance Osaka Seminar: Overview.pdf
FIDO Alliance Osaka Seminar: Overview.pdfFIDO Alliance Osaka Seminar: Overview.pdf
FIDO Alliance Osaka Seminar: Overview.pdf
FIDO Alliance
 
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
Product School
 
Epistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI supportEpistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI support
Alan Dix
 
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
UiPathCommunity
 
JMeter webinar - integration with InfluxDB and Grafana
JMeter webinar - integration with InfluxDB and GrafanaJMeter webinar - integration with InfluxDB and Grafana
JMeter webinar - integration with InfluxDB and Grafana
RTTS
 
Accelerate your Kubernetes clusters with Varnish Caching
Accelerate your Kubernetes clusters with Varnish CachingAccelerate your Kubernetes clusters with Varnish Caching
Accelerate your Kubernetes clusters with Varnish Caching
Thijs Feryn
 
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdfFIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
FIDO Alliance
 
DevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA ConnectDevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA Connect
Kari Kakkonen
 
Assuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyesAssuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyes
ThousandEyes
 
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered QualitySoftware Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Inflectra
 
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
Product School
 
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
Thierry Lestable
 
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdfFIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance
 
Mission to Decommission: Importance of Decommissioning Products to Increase E...
Mission to Decommission: Importance of Decommissioning Products to Increase E...Mission to Decommission: Importance of Decommissioning Products to Increase E...
Mission to Decommission: Importance of Decommissioning Products to Increase E...
Product School
 
UiPath Test Automation using UiPath Test Suite series, part 4
UiPath Test Automation using UiPath Test Suite series, part 4UiPath Test Automation using UiPath Test Suite series, part 4
UiPath Test Automation using UiPath Test Suite series, part 4
DianaGray10
 
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
Transcript: Selling digital books in 2024: Insights from industry leaders - T...Transcript: Selling digital books in 2024: Insights from industry leaders - T...
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
BookNet Canada
 
Key Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdfKey Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdf
Cheryl Hung
 

Recently uploaded (20)

De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
De-mystifying Zero to One: Design Informed Techniques for Greenfield Innovati...
 
Essentials of Automations: Optimizing FME Workflows with Parameters
Essentials of Automations: Optimizing FME Workflows with ParametersEssentials of Automations: Optimizing FME Workflows with Parameters
Essentials of Automations: Optimizing FME Workflows with Parameters
 
FIDO Alliance Osaka Seminar: Passkeys at Amazon.pdf
FIDO Alliance Osaka Seminar: Passkeys at Amazon.pdfFIDO Alliance Osaka Seminar: Passkeys at Amazon.pdf
FIDO Alliance Osaka Seminar: Passkeys at Amazon.pdf
 
FIDO Alliance Osaka Seminar: Overview.pdf
FIDO Alliance Osaka Seminar: Overview.pdfFIDO Alliance Osaka Seminar: Overview.pdf
FIDO Alliance Osaka Seminar: Overview.pdf
 
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...
 
Epistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI supportEpistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI support
 
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...
 
JMeter webinar - integration with InfluxDB and Grafana
JMeter webinar - integration with InfluxDB and GrafanaJMeter webinar - integration with InfluxDB and Grafana
JMeter webinar - integration with InfluxDB and Grafana
 
Accelerate your Kubernetes clusters with Varnish Caching
Accelerate your Kubernetes clusters with Varnish CachingAccelerate your Kubernetes clusters with Varnish Caching
Accelerate your Kubernetes clusters with Varnish Caching
 
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdfFIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
 
DevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA ConnectDevOps and Testing slides at DASA Connect
DevOps and Testing slides at DASA Connect
 
Assuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyesAssuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyes
 
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered QualitySoftware Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
 
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...
 
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...
 
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdfFIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
 
Mission to Decommission: Importance of Decommissioning Products to Increase E...
Mission to Decommission: Importance of Decommissioning Products to Increase E...Mission to Decommission: Importance of Decommissioning Products to Increase E...
Mission to Decommission: Importance of Decommissioning Products to Increase E...
 
UiPath Test Automation using UiPath Test Suite series, part 4
UiPath Test Automation using UiPath Test Suite series, part 4UiPath Test Automation using UiPath Test Suite series, part 4
UiPath Test Automation using UiPath Test Suite series, part 4
 
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
Transcript: Selling digital books in 2024: Insights from industry leaders - T...Transcript: Selling digital books in 2024: Insights from industry leaders - T...
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
 
Key Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdfKey Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdf
 

Lession 5

Editor's Notes

  1. Organizational Units hay OU là đơn vị nhỏ nhất trong hệ thống Active Directory nó được xem là một vật chứa các đối tượng (Object) được dùng để sắp xếp các đối tượng khác nhau phục vụ cho mục đích quản trị của bạn. Việc sử dụng OU có hai công dụng chính như sau : Trao quyền kiểm soát một tập hợp các tài khoản người dùng, máy tính hay các thiết bị mạng cho một nhóm người hay một quản trị viên phụ nào đó (sub-administrator), từ đó giảm bớt công tác quản trị cho người quản trị toàn bộ hệ thống. Kiểm soát và khóa bớt một số chức năng trên các máy trạm của người dùng trong OU thông qua việc sử dụng các đối tượng chính sách nhóm (Group Policy) Local User(s): là user(s) chỉ tồn tại trên chính máy client đó, user(s) đó chỉ có thể đăng nhập (logon) trên chính máy tính đó và sẻ không thể đăng nhập vào máy tính khác với user(s) đó. Domain user(s) là user(s) được tạo trên AD của máy tính đóng vai trò là 01 Domain Controller, domain user(s) có thể đăng nhập vào bất kì máy tính trong hệ thống mạng (với điều kiện, máy tính đó được join vào domain) Local Group: Cũng tương tự như local user, local group chỉ tồn tại trên máy tính đó, và để dễ quản lý, local group sẽ chứa những local user cùng nhóm (group) với mình Vd: NhanSu_Group; KeToan_Group; KinhDoanh_Group; … Domain Group: Cũng tương tự như Domain user(s), domain group(s) tồn tại trên AD máy DC và chứa các domain user(s) tương ứng để giúp cho người quản trị hệ thống dễ quản lý
  2. GPO -> User Configuration -> Windows Settings -> Security Settings -> Right Click on software Restriction Policy and Select Create new Software Restriction Policy. Right Click on Additional Rules -> New Path Rule Create 7 rules for each of the lines below. chromesetup.exe chrome.exe gears-chrome-opt.msi C:\Users\%username%\AppData\Local\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application C:\Program Files (x86)\Google\Chrome\Application
  3. https://ibb.co/XVz25NH