Fix secedit in nano server
secedit is broken in nano server (checked both TP3 and TP4) and it simply doesn't work. I have asked about it @nano server forum as well without any response so far.
https://social.technet.microsoft.com/Forums/windowsserver/en-US/894a3a8f-64f4-4605-b1ff-9698a53814db/issues-running-secedit-on-nano-server?forum=NanoServer
There is absolutely no way to harden a nano server once it is deployed. can it be fixed? or is there new way to work with local security policy on nano server that I am unaware of?
uc
shared this idea
Thanks for the feedback, we are looking into some options here.
3 comments
-
uc
commented
this is part of what I wanted to be in nano.. thanks for adding it :)
https://blogs.msdn.microsoft.com/powershell/2016/05/09/new-security-cmdlets-in-nano-server/I would like to see cmdlet to perform something like this:
- get setting of any given policy.. like Get-SecurityPolicy -PolicyName minimumPasswordAge
it should return the value of this policy
- similarly, get values of multiple policies in an array (based on array of policy names)
- set single or multiple policies etc.
- identify if any given policy is configured via group policy or not (I know its not relevant for nano but for full/core, it will be helpful so that we don't attempt to set them using cmdlet)thanks!
-
Nir Ben-Zvi
commented
Nir Ben-Zvi [MSFT] Great feedback. Please take a look at the following post and let us know if this is what you were looking for: https://blogs.msdn.microsoft.com/powershell/2016/05/09/new-security-cmdlets-in-nano-server/
-
Thanks for the feedback, we are looking into some options here.