Skip to content

ADMX files #9

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
VShell wants to merge 1 commit into
base: master
Choose a base branch
from
Open

ADMX files #9

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
39 changes: 39 additions & 0 deletions ADMX/en-US/ts_block.adml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,39 @@
<policyDefinitionResources revision="1.0" schemaVersion="1.0">
<displayName>
</displayName>
<description>
</description>
<resources>
<stringTable>
<string id="unknown_0">Wellbury LLC</string>
<string id="POL_B1009DB8_CB23_4FCE_89DC_0C7288DDF242">Block attempts threshold</string>
<string id="SUPPORTED_WindowsNET">At least Microsoft Windows Server 2003</string>
<string id="POL_B1009DB8_CB23_4FCE_89DC_0C7288DDF242_Help">The number of sequential failed logon attempts (with accounts that are not considered 'block immediately' accounts) that will trigger a block.</string>
<string id="POL_E9649283_EF21_46DE_A4EB_94755E8AB534">Block duration</string>
<string id="POL_E9649283_EF21_46DE_A4EB_94755E8AB534_Help">The duration, in seconds, of a block (either because of reaching the BlockAttempts threshhold or because of a 'block immediately').</string>
<string id="POL_38E7A3C0_53C5_40D9_BDAC_B5365F3307A5">Block timeout</string>
<string id="POL_38E7A3C0_53C5_40D9_BDAC_B5365F3307A5_Help">The duration, in seconds, that must elapse between failed logon attempts to reset the count of failed logon attempts for a given IP address.</string>
<string id="POL_B68ABBBD_ED7E_45D5_8D51_BE3A3DA9420F">Black-hole IP address</string>
<string id="POL_B68ABBBD_ED7E_45D5_8D51_BE3A3DA9420F_Help">The IP address used for the black-hole route (for Windows Server 2003). If not specified the default algorithm of selecting the IP address of a network interface with no default gateway specified will be used. This setting is not used in Windows Server 2008 and later versions of Windows.</string>
<string id="CAT_3B9BF168_B2B5_4DFF_BCBE_D4728FE14547">ts_block</string>
</stringTable>
<presentationTable>
<presentation id="POL_B1009DB8_CB23_4FCE_89DC_0C7288DDF242">
<decimalTextBox refId="DXT_53873407_6173_4187_A01A_7CA20BA6B30C" defaultValue="5">Block attempts threshold</decimalTextBox>
</presentation>
<presentation id="POL_E9649283_EF21_46DE_A4EB_94755E8AB534">
<decimalTextBox refId="DXT_3C1BBDAB_16FC_44B8_99BA_5FCC92B2C4E5" defaultValue="300">Block duration</decimalTextBox>
</presentation>
<presentation id="POL_38E7A3C0_53C5_40D9_BDAC_B5365F3307A5">
<decimalTextBox refId="DXT_6480590B_BF7A_442D_9674_2CB01C1480A8" defaultValue="120">Block timeout</decimalTextBox>
</presentation>
<presentation id="POL_B68ABBBD_ED7E_45D5_8D51_BE3A3DA9420F">
<textBox refId="TXT_CEB9BE72_9838_4F14_9534_F22A942BA846">
<label>Black-hole IP address</label>
<defaultValue>
</defaultValue>
</textBox>
</presentation>
</presentationTable>
</resources>
</policyDefinitionResources>
48 changes: 48 additions & 0 deletions ADMX/ts_block.admx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,48 @@
<policyDefinitions revision="1.0" schemaVersion="1.0">
<policyNamespaces>
<target prefix="fullarmor" namespace="FullArmor.Policies.504CBC92_2FDF_44D9_BEDD_38D1289FBBE5" />
<using prefix="windows" namespace="Microsoft.Policies.Windows" />
</policyNamespaces>
<resources minRequiredRevision="1.0" />
<supportedOn>
<definitions>
<definition name="SUPPORTED_WindowsNET" displayName="$(string.SUPPORTED_WindowsNET)" />
</definitions>
</supportedOn>
<categories>
<category name="WellburyLLC" displayName="$(string.unknown_0)" />
<category name="CAT_3B9BF168_B2B5_4DFF_BCBE_D4728FE14547" displayName="$(string.CAT_3B9BF168_B2B5_4DFF_BCBE_D4728FE14547)">
<parentCategory ref="WellburyLLC" />
</category>
</categories>
<policies>
<policy name="POL_B1009DB8_CB23_4FCE_89DC_0C7288DDF242" class="Machine" displayName="$(string.POL_B1009DB8_CB23_4FCE_89DC_0C7288DDF242)" explainText="$(string.POL_B1009DB8_CB23_4FCE_89DC_0C7288DDF242_Help)" presentation="$(presentation.POL_B1009DB8_CB23_4FCE_89DC_0C7288DDF242)" key="Software\Policies\Wellbury LLC\ts_block" valueName="BlockAttempts">
<parentCategory ref="CAT_3B9BF168_B2B5_4DFF_BCBE_D4728FE14547" />
<supportedOn ref="SUPPORTED_WindowsNET" />
<elements>
<decimal id="DXT_53873407_6173_4187_A01A_7CA20BA6B30C" key="Software\Policies\Wellbury LLC\ts_block" valueName="BlockAttempts" required="true" minValue="2" />
</elements>
</policy>
<policy name="POL_E9649283_EF21_46DE_A4EB_94755E8AB534" class="Machine" displayName="$(string.POL_E9649283_EF21_46DE_A4EB_94755E8AB534)" explainText="$(string.POL_E9649283_EF21_46DE_A4EB_94755E8AB534_Help)" presentation="$(presentation.POL_E9649283_EF21_46DE_A4EB_94755E8AB534)" key="Software\Policies\Wellbury LLC\ts_block" valueName="BlockDuration">
<parentCategory ref="CAT_3B9BF168_B2B5_4DFF_BCBE_D4728FE14547" />
<supportedOn ref="SUPPORTED_WindowsNET" />
<elements>
<decimal id="DXT_3C1BBDAB_16FC_44B8_99BA_5FCC92B2C4E5" key="Software\Policies\Wellbury LLC\ts_block" valueName="BlockDuration" required="true" minValue="1" />
</elements>
</policy>
<policy name="POL_38E7A3C0_53C5_40D9_BDAC_B5365F3307A5" class="Machine" displayName="$(string.POL_38E7A3C0_53C5_40D9_BDAC_B5365F3307A5)" explainText="$(string.POL_38E7A3C0_53C5_40D9_BDAC_B5365F3307A5_Help)" presentation="$(presentation.POL_38E7A3C0_53C5_40D9_BDAC_B5365F3307A5)" key="Software\Policies\Wellbury LLC\ts_block" valueName="BlockTimeout">
<parentCategory ref="CAT_3B9BF168_B2B5_4DFF_BCBE_D4728FE14547" />
<supportedOn ref="SUPPORTED_WindowsNET" />
<elements>
<decimal id="DXT_6480590B_BF7A_442D_9674_2CB01C1480A8" key="Software\Policies\Wellbury LLC\ts_block" valueName="BlockTimeout" required="true" minValue="1" />
</elements>
</policy>
<policy name="POL_B68ABBBD_ED7E_45D5_8D51_BE3A3DA9420F" class="Machine" displayName="$(string.POL_B68ABBBD_ED7E_45D5_8D51_BE3A3DA9420F)" explainText="$(string.POL_B68ABBBD_ED7E_45D5_8D51_BE3A3DA9420F_Help)" presentation="$(presentation.POL_B68ABBBD_ED7E_45D5_8D51_BE3A3DA9420F)" key="Software\Policies\Wellbury LLC\ts_block" valueName="BlackholeIP">
<parentCategory ref="CAT_3B9BF168_B2B5_4DFF_BCBE_D4728FE14547" />
<supportedOn ref="SUPPORTED_WindowsNET" />
<elements>
<text id="TXT_CEB9BE72_9838_4F14_9534_F22A942BA846" key="Software\Policies\Wellbury LLC\ts_block" valueName="BlackholeIP" required="true" />
</elements>
</policy>
</policies>
</policyDefinitions>
14 changes: 7 additions & 7 deletions README.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -120,13 +120,13 @@ address of a network interface with no default gateway specified will be
used. This setting is not used in Windows Server 2008 and later versions
of Windows.

A Group Policy Administrative Template (ADM) file is included with this
distribution that is capable of setting these values. Deploying a GPO
near the top of the domain with the BlockAttempts, BlockDuration, and
BlockTimeout values specified and Site or OU-level GPOs with the
BlackholeIP value specified (as this will vary based on the subnets
where the server computers are located, and is only necessary for
Windows Server 2003 machines) is recommended.
A Group Policy Administrative Template (ADM or ADMX) file is included
with this distribution that is capable of setting these values.
Deploying a GPO near the top of the domain with the BlockAttempts,
BlockDuration, and BlockTimeout values specified and Site or OU-level
GPOs with the BlackholeIP value specified (as this will vary based on
the subnets where the server computers are located, and is only necessary
for Windows Server 2003 machines) is recommended.


Script Testing
Expand Down