What are the suggested and preferred ways to apply EMET 4 GPO configuration changes?

Question

Logon Scripts with emet_conf.exe don't work because admin privileges are required and startup scripts lag in time. It should be somewhat "event driven".
Thanks and best regards.

Answer 1

You can also copy and paste this into a group policy object as described manually in http://blogs.technet.com/b/kfalde/archive/2014/03/13/automatically-refreshing-emet-gpo-s.aspx:
<?xml version="1.0"?>
<TaskV2 clsid="{D8896631-B747-47a7-84A6-C155337F3BC8}" name="EMET CONFIG REFRESH" image="2" userContext="0" removePolicy="0" changed="2014-03-17 06:53:16" uid="{E34CB2AC-2D17-4098-8E4E-504B1DA618EB}">
<Properties action="U" name="EMET CONFIG REFRESH" runAs="NTAUTHORITY\SYSTEM" logonType="InteractiveToken">
<Task version="1.2">
<RegistrationInfo>
<Author>MANSERV\peschelf</Author>
<Description>Enhanced Mitigation Experience Toolkit Configuration Update on Group Policy Update</Description>
</RegistrationInfo>
<Principals>
<Principal id="Author">
<UserId>NTAUTHORITY\SYSTEM</UserId>
<LogonType>InteractiveToken</LogonType>
<RunLevel>HighestAvailable</RunLevel>
</Principal>
</Principals>
<Settings>
<IdleSettings>
<Duration>PT5M</Duration>
<WaitTimeout>PT1H</WaitTimeout>
<StopOnIdleEnd>false</StopOnIdleEnd>
<RestartOnIdle>false</RestartOnIdle>
</IdleSettings>
<MultipleInstancesPolicy>Parallel</MultipleInstancesPolicy>
<DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>
<StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>
<AllowHardTerminate>true</AllowHardTerminate>
<AllowStartOnDemand>true</AllowStartOnDemand>
<Enabled>true</Enabled>
<Hidden>false</Hidden>
<ExecutionTimeLimit>PT1H</ExecutionTimeLimit>
<Priority>7</Priority>
</Settings>
<Triggers>
<EventTrigger>
<Enabled>true</Enabled>
<Subscription>&lt;QueryList&gt;&lt;Query Id="0" Path="Application"&gt;&lt;Select Path="Application"&gt;*[System[Provider[@Name='SceCli'] and EventID=1704]]&lt;/Select&gt;&lt;/Query&gt;&lt;/QueryList&gt;</Subscription>
<ExecutionTimeLimit>PT30M</ExecutionTimeLimit>
</EventTrigger>
</Triggers>
<Actions>
<Exec>
<Command>"C:\Program Files (x86)\EMET 4.0\EMET_Conf.exe"</Command>
<Arguments>--refresh</Arguments>
</Exec>
</Actions>
</Task>
</Properties>
</TaskV2>