WPAD Vulnerability Fix

Disable LLMNR via GPO Startup Script to disable NetBios $regkey = “HKLM:SYSTEM\CurrentControlSet\services\NetBT\Parameters\Interfaces” Get-ChildItem $regkey |foreach { Set-ItemProperty -Path “$regkey\$($_.pschildname)” -Name NetbiosOptions -Value 2 -Verbose} Enable SMB Signing (Test this with a small batch of computers …

Adding Custom Administrative Templates to the Central Store

If you want to be able to configure other applications like Google Chrome, Mozilla Firefox, Office 2016, etc. You will need to search for the admx files online Google Chrome (https://dl.google.com/dl/edgedl/chrome/policy/policy_templates.zip) Mozilla Firefox (https://github.com/mozilla/policy-templates/releases/download/v1.7/policy_templates_v1.7.zip) Office …

Updating Administrative Templates

Download the newer Administrative templates from Microsoft’s website. ( I pulled Windows 10 1809 templates from here (https://www.microsoft.com/en-us/download/details.aspx?id=57576) Install or extract the administrative template files to a folder. Copy all the administrative templates to C:\Windows\Sysvol\domain\policies\PolicyDefinitions …