none
unable to view SCM: Pass the Hash Mitigations setting in GPM RRS feed

  • Question

  • Hi,

    I am working on CIS windows 2012 R2 benchmark testing.  I need to  set "Computer Configuration\Administrative Templates\SCM: Pass the Hash Mitigations\WDigest Authentication (disabling may require KB2871997)" this configuration. But I dont find this setting in Domain controller Policy GPM. Can anyone please help me with this.

    And also this setting as well is not there in GP editor  "Computer Configuration\Administrative Templates\SCM: Pass the Hash Mitigations\Apply UAC restrictions to local accounts on network logons"

    Can anyone please help me on this ?


    Friday, April 17, 2015 11:45 AM

All replies

  • Same here.  Any luck so far?
    Thursday, April 23, 2015 9:59 PM
  • +1 - Any luck? Have the same issue as well...
    Saturday, July 18, 2015 9:55 AM
  • I beat myself to it... I've found it if you haven't:

    http://blogs.technet.com/b/secguide/archive/2014/08/13/security-baselines-for-windows-8-1-windows-server-2012-r2-and-internet-explorer-11-final.aspx

    Download the Baselines, extract them, and in the Templates folder you'll find the PtH template files

    Hope this helps?

    Cheers,
    Ray

    Saturday, July 18, 2015 9:59 AM
  • have u got this setting ?  "Computer Configuration\Administrative Templates\SCM: Pass the Hash Mitigations\Apply UAC restrictions to local accounts on network logons" 

    same here problem.

    • Edited by Richa km Wednesday, October 31, 2018 7:00 AM
    Wednesday, October 31, 2018 6:59 AM
  • This policy is already included in the MS Security Guide amdx. 


    Marcelo Carvalho MCT, MCSE 2003/2008, MCSA 2003/2008 + Security, MCDST XP/Vista, MCITP Windows 7, SBS 2003/2008, LICENSING www.h2d.com.br

    Thursday, June 20, 2019 8:53 AM