Jump to content











Photo
- - - - -

Group Policy Editing via a PE Disc ?

gpo group policy objects

  • Please log in to reply
7 replies to this topic

#1 mr-roboto

mr-roboto

    Newbie

  • Advanced user
  • 29 posts
  • Location:NYC
  •  
    United States

Posted 28 April 2012 - 09:13 PM

I hope this isn't a stupid question, but I know very little about this subject. Essentially, I'd like to hack a PC at work and change some policy options on the down-low. I intend nothing criminal or overly unethical (eg. setup a keylogger or vandalism.) This (XP-based) PC is part of very loosely-coupled WAN, one PC per location, and over a thousand locations across the entire corp.

Essentially, I'd like to hack this PC to permit me to install a couple apps (eg. Open/Libre Office), so that I can work at work and not at home. (The PC essentially has only Internet Explorer installed.)

I already have a working LiveXP disc. It's my hope there is a way (maybe via RunScanner) to hack this PC, if someone out there has a Group Policy Object Editor plugin. Anyway, thanks in advance tor your consideration.... :thumbsup:

#2 Agent47

Agent47

    Frequent Member

  • Advanced user
  • 164 posts
  •  
    India

Posted 30 April 2012 - 11:05 AM

It is posible.Every group policy settings are saved in the registry.Find out the software install permissions related keys in registry.You can edit them offline from PE disk.

#3 homes32

homes32

    Gold Member

  • .script developer
  • 1035 posts
  • Location:Minnesota
  •  
    United States

Posted 30 April 2012 - 03:11 PM

although if you are on a domain polices are checked and (re)applied on start up/login, so editing the registry offline may be a waste of your time, depending on how your sysadmin has configured the GPO's
you may be better off using the portable version of libreoffice and run from a USB drive

#4 mr-roboto

mr-roboto

    Newbie

  • Advanced user
  • 29 posts
  • Location:NYC
  •  
    United States

Posted 01 May 2012 - 10:46 AM

although if you are on a domain polices are checked and (re)applied on start up/login, so editing the registry offline may be a waste of your time, depending on how your sysadmin has configured the GPO's
you may be better off using the portable version of libreoffice and run from a USB drive


I had a suspicion of something like reloading policies at startup. As for running a portable app, they've turned off running ANY apps other than the ones they've installed on the system, which is almost nothing. I also have doubts about whether I could come up with the plugin for policy editor in a reasonable amount of time, as I've found virtually nothing on this subject on reboot.

Haven't given up yet, but thanks to both of you for your participation....

#5 dog

dog

    Frequent Member

  • Expert
  • 236 posts

Posted 01 May 2012 - 12:41 PM

If you can boot optical media, you could just use knoppix or similar live media? Or add a second HD, and install your own OS.
I'd try the reasoned persuasion route though, much less likely to lose you your job...

#6 darkman738

darkman738

    Frequent Member

  • Advanced user
  • 134 posts
  • Location:MA, US
  •  
    United States

Posted 02 May 2012 - 02:43 AM

Your simple solution may be to reset the Local Admin's PW. You could login with the local admin account, install the apps and jet, If your Sys Admin isn't an idiot, which is quite possible they could be in my experience, they could finger you for violating company security policy and create an HR case. Now if you are the only user I wouldn't take any action as it would obviously fall back to you as the culprit, I'd get myself a USB with Portable Office or something, it's not worth loosing your job over. I'd second contacting your IT department and request some productivity software, even if it's an Open Source option, otherwise clear it with your manager to either use a portable or install through the local admin account, and let the higher-ups take the bullet if there is a problem. Always CYA, it's always in your best interests.

Keep in mind if your computer is on a domain this method would work, but could limit your ability to save or even use the software depending on the group policy restrictions in place.

#7 Agent47

Agent47

    Frequent Member

  • Advanced user
  • 164 posts
  •  
    India

Posted 02 May 2012 - 03:45 AM

There is another way.You can install win8 on USB drives.Buy a fast pendrive/USB HDD and google how to
install win8 on USB.Here is a basic guide:

http://liliputing.co...lash-drive.html

#8 darkman738

darkman738

    Frequent Member

  • Advanced user
  • 134 posts
  • Location:MA, US
  •  
    United States

Posted 02 May 2012 - 05:16 PM

There is another way.You can install win8 on USB drives.Buy a fast pendrive/USB HDD and google how to
install win8 on USB.Here is a basic guide:

http://liliputing.co...lash-drive.html


While a functional solution, long term it's a bit of an issue.
1. he would be operating outside his production environment, that may not matter to him, but something to consider.
2. and more importantly in my opinion is the legalities, especially for his company, and time frame. Win8 is in CP currently but when the project goes live he will need to purchase a copy of Win8 just for his USB, and then he may need to rebuild it to apply the key. I'm assuming he won't want spend $100 on a copy of Windows by the end of the year just to do his job.

Perhaps I'm misinterpreting both of the situations however.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users