total workstation lockdown: your action plan jeremy moskowitz, group policy mvp chief...
TRANSCRIPT
![Page 1: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/1.jpg)
Total Workstation Lockdown:Your Action PlanJeremy Moskowitz, Group Policy MVPChief Propeller-Head: GPanswers.comFounder: PolicyPak Software (policypak.com)Twitter: @jeremymoskowitz
![Page 2: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/2.jpg)
“What I learned in Belgium” – by Jeremy Moskowitz
![Page 3: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/3.jpg)
“What I learned in Belgium” – by Jeremy Moskowitz
![Page 4: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/4.jpg)
“What I learned in Belgium” – by Jeremy Moskowitz
![Page 5: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/5.jpg)
![Page 6: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/6.jpg)
“What I learned in Belgium” – by Jeremy Moskowitz
![Page 7: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/7.jpg)
“What I learned in Belgium” – by Jeremy Moskowitz
![Page 8: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/8.jpg)
“What I learned in Belgium” – by Jeremy Moskowitz
![Page 9: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/9.jpg)
Disclaimer: Don’t go bananas (and don’t expect a ‘Magic Silver Bullet’)
• Tendency to go “overboard”• No “one way” to skin the cat• Not going to go over all possible solutions• No “Silver Bullet.” It’s incremental, iterative, and
ongoing.
• This talk (mostly) Group Policy-based solutions
![Page 10: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/10.jpg)
Item 1: Hardware Lockout
• Scenario• Need to restrict USB / other devices on network
• Perfect for…• Computers• Specific users
• Utilize:• Group Policy (Windows Vista and later)• Group Policy Preferences (Windows XP and later)
![Page 11: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/11.jpg)
Hardware Lockout Demo
![Page 12: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/12.jpg)
Item 2: Understanding Loopback
• Scenario• Need to implement USER side settings to
COLLECTION of computers
• Perfect for…• Call Centers• Classrooms• Terminal Services
![Page 13: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/13.jpg)
Loopback Demo
![Page 14: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/14.jpg)
Item 3: Security Compliance Manager
• Big (free) tool with lots of functions..• Contains pre-configured GPO baselines from the Windows
Security Guides• Lets you create baselines (and manage them)• Output as: GPO, XLS, Desired Configuration Management
(DCM) packs, or Security Content Automation Protocol (SCAP)
• http://technet.microsoft.com/en-us/library/cc677002.aspx
![Page 15: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/15.jpg)
Item 4: Security Compliance Manager
![Page 16: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/16.jpg)
Item 4: Security Compliance Manager
![Page 17: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/17.jpg)
Item 3: Security Compliance Manager
![Page 18: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/18.jpg)
Security Compliance Manager Demo
![Page 19: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/19.jpg)
Item 4: "Workstation Revert"
• Scenario:• Ensures machines won’t be modified in
“hostile” environment
• Perfect for:• Schools• Internet Café• Walk-up machines• Shop Floor / Kiosk / Library• Home use (possibly)
![Page 20: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/20.jpg)
Microsoft’s Solutions
• Windows SteadyState 2.5• Windows XP and Windows Vista only• http://tinyurl.com/steadystate25 • Warning: Being retired as follows:
• No more downloads after 2010• No more support after 2011
• Free Downloadable PDF chapter about SteadyState at www.GPanswers.com/book
• “Going forward” documentation• Creating a Steady State by Using Microsoft Technologies
• Group Policy Settings for Creating a Steady State • The Steady State Reference Spreadsheet
![Page 21: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/21.jpg)
SteadyState-Like Items For Windows 7
• Free• Wioski• Win7 + VHD + WIM “wrapper” / trickery• www.wioski.com
• Commercial• DeepFreeze from Faronics• Win7 Compatible • http://tinyurl.com/DeepFreeze-TechEd2010
![Page 22: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/22.jpg)
Item 5: AppLocker / Software Restriction Policies
• Notes:• AppLocker not available for all editions of Windows 7• Software Restriction Policies IS available for all editions of
Windows 7
• Software Restriction Policies:• Good for Blacklisting
• AppLocker:• Better for Whitelisting
![Page 23: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/23.jpg)
Item 6: Application Settings Lockout
• ADM/ADMX files for supported applications• Office 2010 ADMX files• http://tinyurl.com/Office2010ADMX
• All other applications…• PolicyPak Community Edition (Free)• PolicyPak Professional Edition
![Page 24: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/24.jpg)
Stay up to date with TechNet Belux
Register for our newsletters and stay up to date:http://www.technet-newsletters.be
• Technical updates• Event announcements and registration• Top downloads
Join us on Facebookhttp://www.facebook.com/technetbehttp://www.facebook.com/technetbelux
LinkedIn: http://linkd.in/technetbelux/
Twitter: @technetbelux
Download MSDN/TechNet Desktop Gadget
http://bit.ly/msdntngadget
![Page 25: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/25.jpg)
TechDays 2011 On-Demand
• Watch this session on-demand via TechNet Edge http://technet.microsoft.com/fr-be/edge/
http://technet.microsoft.com/nl-be/edge/
• Download to your favorite MP3 or video player• Get access to slides and recommended resources by the speakers
![Page 26: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/26.jpg)
Do MORE with Group Policy
![Page 27: Total Workstation Lockdown: Your Action Plan Jeremy Moskowitz, Group Policy MVP Chief Propeller-Head: GPanswers.com Founder: PolicyPak Software (policypak.com)](https://reader036.vdocuments.mx/reader036/viewer/2022070409/56649e725503460f94b71f62/html5/thumbnails/27.jpg)
THANK YOU