From 9d014493749ec802d4989676827737d368622e0c Mon Sep 17 00:00:00 2001 From: Tommy Date: Sat, 6 Jan 2024 04:29:12 -0700 Subject: [PATCH] LDAPS Enforcement Signed-off-by: Tommy --- .../{User Account Control.md => Security Options.md} | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) rename Group Policies Objects/Default Domain Policy/{User Account Control.md => Security Options.md} (67%) diff --git a/Group Policies Objects/Default Domain Policy/User Account Control.md b/Group Policies Objects/Default Domain Policy/Security Options.md similarity index 67% rename from Group Policies Objects/Default Domain Policy/User Account Control.md rename to Group Policies Objects/Default Domain Policy/Security Options.md index b9b09d4..b149b90 100644 --- a/Group Policies Objects/Default Domain Policy/User Account Control.md +++ b/Group Policies Objects/Default Domain Policy/Security Options.md @@ -1,4 +1,4 @@ -# User Account Control +# Security Options Documentation: https://learn.microsoft.com/en-us/windows/security/application-security/application-control/user-account-control/settings-and-configuration?tabs=gpo @@ -6,4 +6,5 @@ Documentation: https://learn.microsoft.com/en-us/windows/security/application-se - User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode -> Prompt for credentials - User Account Control: Only elevate executables that are signed and validated -> Enabled -- User Account Control: Switch to the secure desktop when prompting for elevation -> Enabled (Docs says it is enabled by default, but it is off on my Parallels VM somehow) \ No newline at end of file +- User Account Control: Switch to the secure desktop when prompting for elevation -> Enabled (Docs says it is enabled by default, but it is off on my Parallels VM somehow) +- Security setting -> Define -> Require signing (**Follow this guide to setup LDAPS if you do not have key server: https://www.dvolve.net/blog/2019/12/using-lets-encrypt-for-active-directory-domain-controller-certificates/**) \ No newline at end of file