Tech Savvy
Active Member
- Reaction score
- 211
- Location
- New Jersey
I’m working on a lockdown procedure for a stand-alone government kiosk system. In other words this system is air gapped and is not on a domain. The system has only one application that needs to run, but the application spawns other applications throughout its use.
As some of you may know, the US government uses STIGs as a set of guidelines on how to lockdown the computers. The STIGs have permade GPOs and admin templates that are used as a baseline which can be imported into the host machine.
Everything I do needs to be documented in order to recreate it. So for simplicity I would like to create multiple group policies (like you would in a domain environment) and apply them to the machine via a command line script.
For example a group policy for disabling the screen saver, or creating a lock out policy.
The problem is, the group policy manager doesn’t allow me to create multiple individual policies. (A policy that only changes one or a subset of settings) that collectively would lockdown the system.
Does anyone know how to do this? I want it so that my script would import the individual group policy files to recreate the system. Currently I import via LGPO, but I’m open to other options.
Not actual code, but my script would look something like this:
Apply-GPO disable-screen-saver.gpo
Apply-GPO create-lockout-policy.gpo
Apply-GPO disable-control-panel-functions.gpo
... etc
Obviously that’s an actual script, but that’s essentially what I would like to be doing so that by the end of it we would have a locked down system with all of the individual policies applied after restart, but it’s organized where if something needed to be changed you know right where to look.
Any ideas?
As some of you may know, the US government uses STIGs as a set of guidelines on how to lockdown the computers. The STIGs have permade GPOs and admin templates that are used as a baseline which can be imported into the host machine.
Everything I do needs to be documented in order to recreate it. So for simplicity I would like to create multiple group policies (like you would in a domain environment) and apply them to the machine via a command line script.
For example a group policy for disabling the screen saver, or creating a lock out policy.
The problem is, the group policy manager doesn’t allow me to create multiple individual policies. (A policy that only changes one or a subset of settings) that collectively would lockdown the system.
Does anyone know how to do this? I want it so that my script would import the individual group policy files to recreate the system. Currently I import via LGPO, but I’m open to other options.
Not actual code, but my script would look something like this:
Apply-GPO disable-screen-saver.gpo
Apply-GPO create-lockout-policy.gpo
Apply-GPO disable-control-panel-functions.gpo
... etc
Obviously that’s an actual script, but that’s essentially what I would like to be doing so that by the end of it we would have a locked down system with all of the individual policies applied after restart, but it’s organized where if something needed to be changed you know right where to look.
Any ideas?
