Bypass Windows 10 User Group Policy (and more) with this One Weird Trick

subhrobhandari · Feb 19, 2020

https://medium.com/tenable-techblog/bypass-windows-10-user-group-policy-and-more-with-this-one-weird-trick-552d4bc5cc1b

I‘m going to share an (ab)use of a Windows feature which can result in bypassing User Group Policy (as well as a few other interesting things). Bypassing User Group Policy is not the end of the world, but it’s also not something that should be allowed and depending on User Group Policy setup, could result in unfortunate security scenarios. This technique has been tested against Windows 7 and Windows 10 Enterprise x64 (10.18363 1909) and does not require admin access.
Click to expand...

reasonablePrivacy · Feb 20, 2020

Nice.

itman · Feb 22, 2020

Same old, same old.

Conclusion

We reached out to Microsoft to report this issue as per our 90-day disclosure policy. While they were able to fully replicate this issue, Microsoft deemed this to be expected behavior and not a security issue. While I understand it’s not a critical issue, it’s my belief that modifying protected policies like this is crossing a security boundary, regardless of how it’s done.
Click to expand...

Azure Phoenix · Feb 22, 2020

This was also discussed on Malwaretips
https://malwaretips.com/threads/byp...-with-this-one-weird-trick.98553/#post-860592

Minimalist · Feb 23, 2020

That was clever bypass. I hope that MS decides to fix it even if it's not that "serious".

Log in or Sign up

Bypass Windows 10 User Group Policy (and more) with this One Weird Trick

subhrobhandari Registered Member

reasonablePrivacy Registered Member

itman Registered Member

Azure Phoenix Registered Member

Minimalist Registered Member

Log in or Sign up

Bypass Windows 10 User Group Policy (and more) with this One Weird Trick

subhrobhandari Registered Member

reasonablePrivacy Registered Member

itman Registered Member

Azure Phoenix Registered Member

Minimalist Registered Member

Useful Searches