Ask the Expert

Proper procedure for locking down GPOs?

What is the procedure (if any) to lockdown GPOs against trojan attacks? How can I prevent attacks against my Group Policy?
Prevention is the smartest route here. The best way to do this is to simply lock down your domain controller(s) with anti-malware software and limit who can login and what can be done from the console. You could also install a host-based intrusion prevention application such as BlackICE for Servers.

This was first published in December 2006

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.