Bypassing Group Policy
Darren Mar-Elia, the GPOGuy, writes about some interesting ways that users can get around the application of Group Policy. None of these I'd been aware of before.
There's a rather compliacted method one can use involving DLL injection and intercepted registry calls. This was originally blogged about by Mark Russinovich here. That piece included a tool that...
...could be used to bypass GP application, but was eventually pulled once Winternals merged with Microsoft. Another enterprising individual here wrote and released a replacement for that tool and called it GPCul8r. Very interesting.
Darren concludes with a link to what he calls a "much easier way to disable Group Policy". This white paper discusses some known attack vectors that could be used also to bypass GP application.
Obviously, all of this is merely brought to you as...a...thought...experiment. Neither you, nor your users, woudl use this in practice...right?
Email This!
Digg it!
Sphere it!
Del.icio.us
Reddit!
Newsvine