Skip to content

Add local policy options for domain controller policies #133

Description

@michael-riddle

'Domain controller: Allow server operators to schedule tasks' => {
name: 'MACHINE\System\CurrentControlSet\Control\Lsa\SubmitControl',
reg_type: '4',
policy_type: 'Registry Values',
},
'Domain controller: Allow vulnerable Netlogon secure channel connections' => {
name: 'MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\VulnerableChannelAllowList',
reg_type: '1',
policy_type: 'Registry Values',
},
'Domain controller: LDAP server channel binding token requirements' => {
name: 'MACHINE\System\CurrentControlSet\Services\NTDS\Parameters\LdapEnforceChannelBinding',
reg_type: '4',
policy_type: 'Registry Values',
},
'Domain controller: LDAP server signing requirements' => {
name: 'MACHINE\System\CurrentControlSet\Services\NTDS\Parameters\LDAPServerIntegrity',
reg_type: '4',
policy_type: 'Registry Values',
},
'Domain controller: Refuse machine account password changes' => {
name: 'MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RefusePasswordChange',
reg_type: '4',
policy_type: 'Registry Values',
},

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions