The rationality of the GPO to perform

CSEs is a process in GPO applied commonly in field at very high privilege on a computer executive components.So we must make sureGPO contained in each Client - Side Extension (CSE) is reasonable, and after a trusted party certification.

It is also important,Before applying any content, ensure all the computer retrieval GPO file from the safety position.

Unknown CSEs is considered a risk should be deleted, or in the case of risk acceptance will be included in the white list.GpcFileSysPath properties should be pointing to the safe place, such as SYSVOL share share.

The name of the:The rationality of the GPO to perform

Code name:C - GPO - EXEC - SANITY

severity:High