Monday, 8 August 2016

You can't see the SCM: Pass the Hash Mitigations group policy settings

If you can't see the SCM: Pass the Hash Mitigations group policy settings such as 'Apply UAC restrictions to local accounts on network logons' (for example when you are using the CIS server hardening standard) you need to do the folllowing

Download the security baselines from here and unzip
https://blogs.technet.microsoft.com/secguide/2014/08/13/security-baselines-for-windows-8-1-windows-server-2012-r2-and-internet-explorer-11-final/

Take the file PtH.admx and place into %SystemRoot%\PolicyDefinitions

The policies should then be available


No comments:

Post a Comment