Ebag333

Grouper2 Output

1

``` COMMANDO Sat 04/13/2019 5:46:45.80 C:\Tools\Grouper2>Grouper2.exe -g Switching output to pretty mode. Nice. Running as user: CORP\LabAdmin All online checks will be performed in the context of this user. Trying...

Currently we can easily convert most GPOs to DCM because they are reg keys. But anything in the Security section does not currently get converted.

Level 5 Security Standard GPOs

1

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework

Level 4 Security Standard GPOs

1

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-security-configuration-framework/windows-security-configuration-framework

`HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecureBoot\State` has `UEFISecureBootEnabled = 1` in WinPE Apparently there's also `HKLM\System\CurrentControlSet\Control PEFirmwareType` but you have to run `wpeutil UpdateBootInfo` to populate it and that fails in PE for me.

Allows setting defaults for when creating the cert to notify and/or rotate the cert. Mostly this is so we can default to rotating certs, but might as well give folks...