none
Local Policies/Security Options/Registry - Other

Answers

  • > Is there a specific reason why these settings cannot be accessed without
    > executing this script?
     
    Yes - security policies can be customized, and this is what MSS uses to
    extend them. Do some research about sceregvl.inf :-)
     
    In the thread you linked, Santosh posted a link to the USGCB blog that
    has some explanations about it.
     
    Monday, May 9, 2016 3:50 PM
  • Am 09.05.2016 um 17:50 schrieb Martin Binder [MVP]:
    > [...] Do some research about sceregvl.inf :-)
     
    A little bit easier:
    Use the MSS-legacy.admx/adml provided with SCM
     
    You will find all settings instead within Security, here:
    Computer Configuration / Policies / Administrative Templates / MSS (Legacy)
     
    Then there is no need to edit every scregvl.inf on every GP editing machine.
     
    Mark
    --
    Mark Heitbrink - MVP Group Policy - Cloud and Datacenter Management
     
    Homepage:  http://www.gruppenrichtlinien.de - deutsch
     
    Monday, May 9, 2016 4:14 PM

All replies

  • > Is there a specific reason why these settings cannot be accessed without
    > executing this script?
     
    Yes - security policies can be customized, and this is what MSS uses to
    extend them. Do some research about sceregvl.inf :-)
     
    In the thread you linked, Santosh posted a link to the USGCB blog that
    has some explanations about it.
     
    Monday, May 9, 2016 3:50 PM
  • Am 09.05.2016 um 17:50 schrieb Martin Binder [MVP]:
    > [...] Do some research about sceregvl.inf :-)
     
    A little bit easier:
    Use the MSS-legacy.admx/adml provided with SCM
     
    You will find all settings instead within Security, here:
    Computer Configuration / Policies / Administrative Templates / MSS (Legacy)
     
    Then there is no need to edit every scregvl.inf on every GP editing machine.
     
    Mark
    --
    Mark Heitbrink - MVP Group Policy - Cloud and Datacenter Management
     
    Homepage:  http://www.gruppenrichtlinien.de - deutsch
     
    Monday, May 9, 2016 4:14 PM
  • Hi Wim,

    This security setting does not appear in the local Group Policy object by default.

    Here is an article below about local group policy for your reference.

    Local Group Policy Objects

    https://technet.microsoft.com/en-us/library/cc978247.aspx

    Best Regards,

    Jay


    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, May 10, 2016 7:13 AM
    Moderator
  • Now we have alternatives to make those settings visible in the editor, the question remains:

    Why are those settings hidden in the first place? We created a new W2k12 security baseline and these settings appear in the settings tab in the GPMC, but not in the editor. Is Microsoft assuming that everyone is using these settings and thus cannot be changed by default?

    Thanks again,

    WiM

    Tuesday, May 10, 2016 12:28 PM