New
#1
ADMX Templates vs Registry files
Hi all,
I'm working on hardening a Windows 7 host. I was given a spreadsheet with all the settings that it needs to be hardened with, so I went ahead and applied those. However, it sounds like in the future we will have more Win7 hosts that will also need to be hardened, so I'd like to try and automate/streamline this process somehow.
What I've done so far (and now I'm not sure I'm doing the right thing) is create a Security Template (.inf file) using MMC. For the rest of the settings, I've downloaded the ADMX templates from the Microsoft website, and I've been "configuring" those with the settings that are outlined in the spreadsheet given to me.
That said, I haven't actually tested the templates. I'm currently working on converting an old .adm file to .admx. Then it hit me: is this even the best way to go about this? Should I just create a big .reg file containing all these keys, and then run them on the target boxes?
What do y'all think? What has been your experience with Windows 7 hardening? Am I going down the right path?
Thanks in advance!
Pedro