Locked-down IE7, issues (and a bug) with Protected Mode....

Project/source code for Set_FDCC_LGPO v1.06...

Set_FDCC_LGPO v1.06 posted to reflect NIST's updates to their FDCC GPO downloads. (Need more acronyms.)...

Visual Studio 2005 project and source code files for Apply_LGPO_Delta v1.01 is attached to this blog post. [Attachment removed, as a newer version is available -- bookmark the landing page for the most up-to-date-links.]

Apply_LGPO_Delta, a utility for automating the management of local group policy, is updated with a minor fix to prevent sharing-violation errors. The set of "starter" files is also updated....

Visual Studio 2005 project files and source code for Set_FDCC_LGPO.exe v1.05 is attached to this blog post. (This blog doesn't support multiple file attachments per post...) [Attachment removed, as a newer version is available -- bookmark the landing...

[2009-04-15: Attachment removed. Bookmark this page for the latest versions of these utilities.] The utility for applying FDCC configuration settings en masse to a computer has been updated: The 0x80070020 sharing-violation error code that occasionally...

Part 2 of a series on the intersection of Internet Explorer 7 and application of security guidance (e.g., the US Federal Desktop Core Configuration). This part talks about the impact of locked-down configurations on typical non-admin end users....

Author: Mandy Tidwell, Senior Consultant Applies to: Windows Vista SP1 Setting: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Create Symbolic Links History: After implementing FDCC on Windows...

Author: Mandy Tidwell, Senior Consultant, Microsoft Consulting Services Credit: Jim Riekse, Consultant, Microsoft Consulting Services Applies to: Windows XP and Windows Vista Setting: Computer Configuration\Windows Settings\Security Settings...

Summary In the process of defining the FDCC image, the National Institute of Standards (NIST) included several Federal and DoD Root and Intermediate x509 certificates in the FDCC Vista Trusted Root and Intermediate Certification Authorities stores...

Author: Shelly Bird Credit: Syed Ismail, Ben Christenbury Applies to: Vista SP1 alone. Setting: Microsoft Network Client: Digitally Sign communications (always) is set to Enabled in FDCC. History: The server side settings are always...

Part 1 of a series on the intersection of Internet Explorer 7 and application of security guidance (e.g., the US Federal Desktop Core Configuration). Quick primer on security zones, policies, preferences, templates; Trusted Sites vs. Intranet zone, and the so-called "locked-down" zones....

Set_FDCC_LGPO - source code and Visual Studio project files, updated for Q3 2008 (FDCC Major Version 1.0)...

Set_FDCC_LGPO utility updated to conform to NIST's 2008 Q3 update (FDCC Major Version 1.0). Set_FDCC_LGPO is a utility to apply FDCC settings to Local Group Policy. ...

Q&A content from the "Using BitLocker with FDCC and FIPS" webcast from May 27, 2008, and link to the on-demand recording....

Source code for the Apply_LGPO_Delta utility....

Apply_LGPO_Delta 1.0, a utility to automate custom changes to Local Group Policy....

Webcast to demonstrate "Apply_LGPO_Delta"....

Set_FDCC_LGPO utility updated to conform to NIST's 2008 Q1 update. Set_FDCC_LGPO is a utility to apply FDCC settings to Local Group Policy....

[Authors: Aaron Margosis and Shelly Bird] We recently noted in testing some problems with the Disable Java setting. We had stated in a recent FDCC LiveMeeting that the "Java Permissions/Disable Java" IE security zone settings only apply to the Microsoft...

Author: Joel Yoker, Principal Consultant A reader recently sent in a question about the GPO Import script and a syntax error they received at line 356. We were able to reproduce the error and it appears to be a "cut and paste" error between the...

Author: Paul Fox, Senior Consultant Scenario : A customer wants a custom power plan for their laptop images. This is a frequent request to meet new Green initiatives in Federal and State governments. Here are the steps to incorporate a scripted...

Author: Mandy Tidwell, Senior Consultant As many of you may have noticed, the FDCC Group Policy settings spreadsheet and FDCC Group Policy Objects (GPOs) downloaded from NIST ( http://csrc.nist.gov/fdcc ) contain settings that are not exposed by...

Author: Paul Fox, Senior Consultant Question : Is it possible to save more than 1 Set of Recovery Keys to a single USB drive? Answer: Yes, you can save multiple BitLocker recovery keys to single USB drive. The size of a key is 124 bytes. More...