Updated LGPO utility sources

re: Updated LGPO utility sources

Mark — Fri, 10 Aug 2012 17:27:19 GMT

I would like to use the provided source as part of my product. Is this allowed by the license? It is unclear to me since the license states:

THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF

ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED

TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A

PARTICULAR PURPOSE.

[Aaron Margosis] You can use the source code the way you would any MSDN sample code.

re: Updated LGPO utility sources

jacksoa — Thu, 28 Jul 2011 20:15:39 GMT

How would I apply the policies to win7 using ImportRegPol.exe, or do I use the Set_FDCC_LGPO.exe and Apply _LGPO_Delta.exe as well? is there sample code?

[Aaron Margosis] See the PowerShell script on this post:

http://blogs.technet.com/b/fdcc/archive/2010/10/02/fdcc-is-now-usgcb.aspx

Set_FDCC_LGPO is for XP and Vista only. It will not be updated for Win7.

re: Updated LGPO utility sources

Carl Nakamura — Tue, 22 Feb 2011 09:25:03 GMT

Hi Aaron,

I'm not a developer but I appreciate the functionality of Apply_LGPO_Delta.exe a lot. Would it be possible add functionality to delete a registry branch including all values? if using the action DELETEALLVALUES

* you need to recursively specify all sub-branches that contains values in the input file.

E.g.

I would like to be able to delete HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\14.0 by just specifying this string and not have to specify all sub branches eg HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Access

HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common etc.

Thanks,

Carl

re: Updated LGPO utility sources

Robert Rathbun — Sun, 24 Jan 2010 04:15:39 GMT

Aaron,

How long before we start seeing Windows 7 FDCC Blog related materials?

From what I have read it appears Microsoft and the Air Force are working on Windows 7 FDCC settings. There is also some indications that DISA has a Windows 7 STIG document but I have yet to see anything formal in public forums yet.

The Army indicated DISA has a checklist, but I couldn't find it anywhere yet.

Any indication when we will see the Windows 7 FDCC settings start rolling out? I would be interested in getting my hands on any LGPO utilities as early as possible.

Thanks,

Robert

[Aaron Margosis] Hopefully soon. I can't really publish anything here until after NIST or the DoD release their drafts for public review. Chances are very good that the settings will be similar to what's in the Vista settings, so if you want to do some Win7/FDCC testing, apply the Vista settings to a Win7 computer. One way you can do that is download the latest NIST GPOs, find the registry.pol files in them that apply to Vista or "Both" and apply them with ImportRegPol, and find the security templates (GptTmpl.inf) that apply to Vista or "Both" and apply them either with Secedit.exe or Apply_LGPO_Delta (the latter is easier).