azcomputerguru/claudetools
1
0
Fork 0
Code Issues 58 Pull Requests Actions Packages Projects Releases Wiki Activity

sync: auto-sync from HOWARD-HOME at 2026-07-17 14:35:21

Browse Source 
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-17 14:35:21
This commit is contained in:
Howard Enos
2026-07-17 14:35:55 -07:00
parent 8d2ca14cac
commit 5076f8f4b1
10 changed files with 289 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
clients/cascades-tucson/scripts/applocker-to-gpo.ps1 Normal file
View File

@@ -0,0 +1,22 @@
Import-Module GroupPolicy
$gpoName = 'CSC - Caregiver Device Lockdown'
$xmlPath = "\\cascades.local\SYSVOL\cascades.local\scripts\applocker-caregiver.xml"
$xml = Get-Content $xmlPath -Raw
Set-AppLockerPolicy -XmlPolicy $xmlPath -Ldap "LDAP://$(([ADSI]'').distinguishedName)" -ErrorAction SilentlyContinue
# AppLocker GPO needs to be set via registry in the GPO
# HKLM\SOFTWARE\Policies\Microsoft\Windows\SrpV2\Appx
$gpo = Get-GPO -Name $gpoName
$base = 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SrpV2\Appx'
Set-GPRegistryValue -Guid $gpo.Id -Key $base -ValueName 'EnforcementMode' -Type String -Value '1' | Out-Null
# Parse XML to extract individual rules
[xml]$doc = $xml
$rules = $doc.AppLockerPolicy.RuleCollection | Where-Object { $_.Type -eq 'Appx' }
foreach ($rule in $rules.FilePublisherRule) {
$ruleXml = $rule.OuterXml
Set-GPRegistryValue -Guid $gpo.Id -Key "$base\$($rule.Id)" -ValueName 'Value' -Type String -Value $ruleXml | Out-Null
Write-Output "GPO rule: $($rule.Name)"
}
Write-Output "AppLocker rules written to GPO: $gpoName"
# Enable AppIDSvc via GPO
Set-GPRegistryValue -Guid $gpo.Id -Key 'HKLM\SYSTEM\CurrentControlSet\Services\AppIDSvc' -ValueName 'Start' -Type DWord -Value 2 | Out-Null
Write-Output "AppIDSvc set to Automatic in GPO"