How to configure group policy for emet via a command line

I have been tasked with installing emet on 50 servers that I only have access to with our patching server (so I can't remote in and open the gpedit gui). I can get it to install, but now the problem that I'm facing is I need to enable 6 of the group policies
for emet. Is there a way to do this while installing it? or a way to do it after the install?

cmd line you need to deal with is in the C:\Program Files (x86)\EMET 4.1 folder
specifically emet_conf --refresh would tell the systems to pull in the settings from a GPO they have already applied.
In a non - SCCM environment I would probably recommend using group policy preferences and create a task scheduler item on your servers that runs emet_conf --import
\\fileserver\settingsfile.xml on some sort of automated basis. Then you can just configure a client like you need and run the emet_conf --export
\\fileserver\settingsfile.xml whenever you need to change a mitigation etc and the clients will pick up on the change on their next run of the task scheduler item.
In general installing on servers isn't a great idea and is not the intended use case for emet however if you are DoD/Gov then DISA has mandated it so won't argue there. There's also the people that still have Internet access from servers so then it
would make sense in that environment as well.
CSS Security Support Engineer (FCS/MBSA/WUA/Incident Response/FOPE) Check out my blog http://blogs.technet.com/kfalde or better yet check out http://technet.com/wiki and start contributing :)

Similar Messages

Configuring group policy for user profiles in Windows Server 2012 R2 Domain

Requesting some experts advise on configuring group policy for user profiles.
We will be building new Windows Server 2012 R2 Domain Controllers (Domain of 400 users).
The settings which I am concerned:
1. Folder Redirection: Desktop, Documents, Favorites.
2. Quota for Folder Redirection - 1 GB per user.
3. Map a networked drive - 1 GB per user.
4. Roaming profile - (Will ignore if it does not suit our requirement).
The question is how outlook profile will be retained / automatically moved if the users move from once computer to other?
FYI, E-mails hosted on MS Office365 and OST file size of few users more than 25GB. So, in case the user moves from one computer to other, the entire mailbox will be downloaded via internet. This consumes high bandwidth if more than 3-4 users shift per day.
Thanks a lot for your valuable time and efforts.

Hi,
>>The question is how outlook profile will be retained / automatically moved if the users move from once computer to other?
This depends on where our outlook data files are stored. If these data files are stored under
drive:\Users\<username>\AppData\Local, then these files can’t be redirected, for folder redirection can’t redirect appdata local or locallow.
However, regarding your question, we can refer to the following thread to find the solution.
Roam outlook profiles without roaming profiles
http://social.technet.microsoft.com/Forums/office/en-US/3908b8e0-8f44-4a34-8eb5-5a024df3463e/roam-outlook-profiles-without-roaming-profiles
In addition, regarding how to configure folder redirection, the following article can be referred to for more information.
Configuring Folder Redirection
http://technet.microsoft.com/library/cc786749.aspx
Hope it helps.
Best regards,
Frank Shen

How to configure Fault policy for the Mediator??

Hi All,
I failed to configure fault policy for the mediator on FMW 11g. Below are my configurations.
1. I created simple ESB project: Consume message(using JMS adapter) from AQ topic: Q1 and produce to another AQ topic: Q2. In order to test the fault policy, The project will thorw an exception when produce to the AQ topic Q2 (Q2 didnt exist).
2. Created fault-policies.xml and fault-bindings.xml files in the Composite project directory.
But it didnt work, I didnt find any retry action in the log file. Is this the correct way to configure the fault policy? your suggestions are welcome. thanks.
fault-policies.xml
======================================================
<?xml version="1.0" encoding="UTF-8"?>
<faultPolicies>
<faultPolicy version="2.0.1" id="CRM_ServiceFaults">
<Conditions>
<faultName xmlns:medns="http://schemas.oracle.com/mediator/faults"
name="medns:mediatorFault">
<condition>
<test>contains($fault.mediatorErrorCode, "TYPE_FATAL_MESH")</test>
<action ref="ora-retry"/>
</condition>
</faultName>
</Conditions>
<Actions>
<Action id="ora-retry">
<retry>
<retryCount>3</retryCount>
<retryInterval>40</retryInterval>
<exponentialBackoff/>
<retryFailureAction ref="ora-terminate"/>
<retrySuccessAction ref="ora-terminate"/>
</retry>
</Action>
<Action id="ora-terminate">
<abort/>
</Action>
</Actions>
</faultPolicy>
</faultPolicies>
fault-bindings.xml
==========================================================
<?xml version="1.0" encoding="UTF-8"?>
<faultPolicyBindings version="2.0.1"
xmlns="http://schemas.oracle.com/bpel/faultpolicy"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<composite faultPolicy="CRM_ServiceFaults"/>
</faultPolicyBindings>
Thanks Mingzhuang

http://download.oracle.com/docs/cd/E12839_01/integration.1111/e10224/bp_faults.htm#SOASE9906

How can I setup a PAC File via terminal command line?

I've tried using:
networksetup -setautoproxyurl ethernet http://pacurl.com/proxy/test.pac
I believe the command may be deprecated? What is the best way to get this done?
Your thoughts on this are appreciated...

Dear All,
My problem is solved by the following code:
exportBiarLocation=D:\ExportMyFile.biar
action=exportXML
userName=Administrator
password=bl123456
CMS=bldhkbo02:6400
authentication=secEnterprise
exportQuery=select * from ci_appobjects
Save the above proterties file in a specific path.
Run the above properties file by the following cmd command:
C:\Program Files\Business Objects\common\4.0\java\lib>java -jar biarengine.jar ....\MyExport.properties
Regards,
Tamzidul Amin.

How to configure Email notification for User login's in Exchange Infrastructure?

How to configure Email notification for User login's in Client Machines?

Hi ,
Based on the description , you need to assign logon scripts to the end users via group policy and also use your exchange server as the smtp server in that logon script to relay emails to the internal recipients.
Thanks & Regards S.Nithyanandham

How to configure release procedure for rate contracts release

Dear all,
How to configure release procedure for rate contract following are the requirements
they are two release codes c1 & c2 <=100000,>=100000
 if c1 is not there c2 has to be approved
 Change in the value of the rate contract contract
 Change in the validity of the rate contract
 Addition of deletion of line items
While using a non u2013 released rate contract in the PO an error message should shoot out.
Also the logic should be changed while using the rate contract in the PO.
The usage of the rate contract should be till the validity of the rate contract. i.e. the measurement should be end date of the rate contract and the PO creation date and not the delivery date of the PO. &
It should be possible to refer existing valid rate contracts in purchase orders.
Regards,
bhaskar

Hi,
In SAP rate contract is known as value contract denoted with wk. The release procedure for rate contract is same as that of other contracts and scheduling agreements. The tables for contracts will vary with SA (Scheduling agreement) .You may try and maintain condition records based on the customer combination and maintian the validity date of condition records as per your requirement.For contract and PO will have the same header/item table as EKKO/EKPO, and the release
class in standard is the same FRG_EKKO, you can use the same for contract.
To distinguish if it's a contract or PO, EKKO-BSART can be used.
For contract EKKO-BSART will be MK or WK, while PO will have NB/UB etc..
You can restrict the document type to set up the release strategy for only contract.
Of cause, you can also create your own release class Z* for contract copying standard
one FRG_EKKO via CL01/Class type 032, and then assign the class Z* to customizing:
OLME:
-> contract
->Release Procedure for Contracts
->Define Release Procedure for Contracts
->Release Groups
If you have already created the PO release class.
Assign a new chracteristic of Document Category -BSTYP
Please check below link for detailed release procedure. I hope this wil help you out .Thanking you.
http://wiki.sdn.sap.com/wiki/display/ERPSCM/RELEASE+PROCEDURE#RELEASEPROCEDURE-TABLESUSEDFORRELEASEPROCEDURES

Can't configure group policy

ZCM 11.2.3a
Windows 7
Firefox 17.0.11 ESR
Per the docs:
http://www.novell.com/documentation/...a/bau5n2g.html
I have installed the helper application. But if I click on Configure,
I get a Configure Group Policy settings dialog with Upload and Cancel
buttons and nothing else happens. Am I missing something? Why doesn't
this work?
Ken

Originally Posted by ketter
On Wed, 19 Mar 2014 20:06:21 GMT, Shaun Pond
<[email protected]> wrote:
>KeN,
>
>sure this isn't happening? http://www.novell.com/support/kb/doc.php?id=3523946
On a whim, I just tried running Firefox with "Run as Administrator".
Suddenly things start working. Might be nice if the docs mentioned
the need for that. I think I will make a comment on the doc page.
KeN
I didn't even know you could configure GPO in Firefox
Thx for reporting back the solution and if you have time then please submit a doc feedback on that page.
Thomas

How to configure Broadcast messaging for IC Webclient profile

Dear all,
How to configure Broadcast messaging for IC Webclient profile. what are the prerequisites for it?
We are not using EP interface for IC Webclient, then where can I find broadcast messaging URL in SAP CRM system.
I have checked for the relevant BSP application, but could not find.
Please help me to configure the scenario successfully, your help will be highly appreciated.
Best regards,
Raghu ram

Hi raghu
In CRM Broad cast messaging application is CRM _BM,
Go to easy access u2013 go to favourites u2013 select add other objects - select BSP Applications- then select CRM_BM Application.
Select that BSP application and test it u2026
`
Regards,
Narsimha

How to set password policy for apps users

Hi All,
Can anyone please help me.
I am working on apps 11i.
How to set password policy for users
Thanks

Check Note: 189367.1 - Best Practices for Securing the E-Business Suite
https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=189367.1

How to configure SMTP server for osb 10.3.1

Hi All,
Can anyone share information on how to configure SMTP server for osb 10.3.1
and then how to send an email from osb 10.3.1
Thanks in Advance!!

Thanks a lot!!
I configured the same way. When I am sending email to an account on the same domain as my SMTP server is the sending of email is successful. But its giving error when I am trying to send an emain to an account which is on different domain. It giving error as "Operation has been cancelled"
Please suggest something.

Group Policy for Windows Ten

http://community.spiceworks.com/topic/1104098-windows-10-gpos

Does anyone know if you need to have Server 2012 domain controller in order to setup group policy for windows ten? Currently we are running Server 2008 R2 but I am starting to get devices with windows ten that I will need to control from group policy.
@CreativeTechie
This topic first appeared in the Spiceworks Community

HT1428 How to change the account name in Mac OS X via a command line. I did a type-o on the account name. So instead of it saying "Company" it says "Comany" for the account logon.

How to change the account name in Mac OS X via a command line. When I created the account I mistyped the name. I have a management suite where I can execute remote scripts. I would like to run a script that changes the name from oldname to newname.
None of these Macs have been used currently.
Thank you,
Brian

If user account shortname, see Changing user account shortname

Setting proxy servers via the command line

I am looking to find out how to set up the system to use http and https proxies via the command line instead of through system preferences. How do I do this. I have basic command line knowledge.

This information is stored in a plist file and is easiest to manipulate with PlistBuddy. For example, to set the HTTP proxy name, use:
/usr/libexec/PlistBuddy -c "Set NetworkServices:6CFBA910-E4A0-4418-82E5-66A6480EBC71:Proxies:HTTPProxy http://my.proxy.com" /Library/Preferences/SystemConfiguration/preferences.plist
Note: 6CFBA910-E4A0-4418-82E5-66A6480EBC71 is a UUID and likely to be unique on each machine. I don't have another Mac handy to check this. If so, you'll need to do some heavy to find out which one is the interface you need to address.
Try man PlistBuddy and/or a web search for more information on how this tool can be used.
Try man PlistBuddy or a web searc for more info on using it.

Can I manage resource designates via the command line?

I would like to manage resource designates via the command line and
the "unires" command does not seem to have this function. Could I use
"uniadmrights"?
# uniadmrights -e -add -resrc -n 10000
 
-e modify user rights, search filter
 
-add set user right on (-e only, default)
 
-resrc resource administration

The uniadmrights command is not able to assign designate rights. You can assign
rights such as the ability to create and manage public and administration
groups. The "Resource administration" flag exists so far only on the
server side, and it is currently not used by the client. This is for future use.

There are two ways to assign a designate to a resource:
<ol>
<LI>Log on as the resource via the client. There are only a few commands
available, one of them being the "Access Rights".

<LI>On the server side:

Edit the /users/unison/misc/resource.ini
file and create a new section to specify the resource designate.

[DES]
Designate0 = S=Lastname/G=Firstname

Run the unires command as follows:

% unires -mod "R=resourcename" -s DES 10000
[sysOpPsw]
</OL>

Note: The full resource name should be used eg. "R=Resource/N=1/CA=2/ID=2
57"

This sounds like a job for wget . You'll have to build and run it on Unix or Cygwin.
You could also build a test suite to do this in various testing tools. You could even write a short Perl or Groovy script to do this, or a slightly longer Java class.

How to Create Test Sequence Document in HTML using command line

How to Create Test Sequence Document in HTML using command line
I have lot of sequences and I want to create Test Sequence Documentation in HTML format using Command Line automatically, is there a way to automate this task using .bat file or using C# .Net

If you aren't able to figure out how to call a C++ DLL in .net then there may be another option. Unfortunately I don't know how to do this off the top of my head and I don't have an example.
The other option would be to change docgen.seq a little bit to the dialog doesn't display and you just hardcode the options. Then you can use a command line to call testexec.exe: http://zone.ni.com/reference/en-XX/help/370052K-01/tsfundamentals/infotopics/startup_opt/
Hope this helps,
jigg
CTA, CLA
teststandhelp.com
~Will work for kudos and/or BBQ~

How to configure group policy for emet via a command line

Similar Messages

Maybe you are looking for