The tag has no usage guidance.

learn more… | top users | synonyms

1
vote
0answers
24 views

Denying access to USB ports, but setting up an “escalation” for allowing access on-demand [migrated]

For Windows 7/10, is there a way to block access to USB ports, but make it so that it could be "authorized" UAC-style by an Administrator, on a case-by-case basis? I know that I can block the USB ...
-1
votes
1answer
53 views

What are the risks of an open regedit.msc in Windows?

Curious as to what sort of damage can be done with an open registry. Is it worth it applying group policy that restricts registry edit access, or is this not necessary?
4
votes
1answer
775 views

Should the “Users” group be removed from Windows Servers “Allow log on locally” Security GPO setting?

I know by default RDP does not allow any non-admin user to RDP into a machine unless we specify it. But a non-admin user can logon to the machine at the console. I was looking at the "Allow log on ...
2
votes
1answer
125 views

How do I audit the effect of security policy on a computer?

I have developed different templates for local security policy. I have been using the program Nexpose to test the effects of those security policies but so far I am not able to detect the visible ...
3
votes
2answers
484 views

Python security hardening

I’m working for a large organization which is using some Windows products that require python to work. Python is used to execute built in utility scripts and the user never recognizes that python is ...
2
votes
2answers
956 views

ByPass usb GPO with iphone -and probably other mobile-

So I am running pentest on a device running Win7 and admin user set group policy to disable all mass storage devices and all usb's. I have access to local user without privs. Although my usb stick ...
2
votes
2answers
2k views

Safe user/group for rsyslog to read application log?

I have an application which writes a logfile in /var/app/applog.log. This application has to be launched as root, but runs as app:app and can also be demoted to nobody:nobody What exactly is nobody:...
8
votes
2answers
25k views

Windows groups and permissions: Authenticated Users group meaning

What is the purpose of the "Authenticated Users" group in Windows? Under Linux it doesn't exist and I'm starting to think this is another idiosyncrasy or over-engineering of the Windows operating ...