4 ms·

I rely on several of these “exploits” in order to be able to do my job on my work machines. I think even IT knows about these tricks but luckily they look the o

I rely on several of these “exploits” in order to be able to do my job on my work machines. I think even IT knows about these tricks but luckily they look the other way.

cosmie 7y ago
Besides the one referenced in the article, any tips (or references) about those tricks?
- GordonS 7y ago
  I got one I mentioned elsewhere here - if registry editing is disabled, just use a different registry app (there are some on Github that are better than the standard one anyway). Then you can undo group policy settings at will, as long as you know which registry keys to flip. A good site for this is: https://gpsearch.azurewebsites.net https://gpsearch.azurewebsites.net Some settings are set in the local security policy file, rather than in the registry. From memory, if you have local admin rights you have to specifically grant your user account full control to the adm files, then you can use the local security policy MMC snap in to change settings. Once you change things, they will periodically be set back, which is annoying, but the tip near the end of the article might work to stop that. Another tip is to install a dual boot version of Windows on an encrypted partition, and use that instead of the "official" install. Of course, this only works if you don't need frequent access to resources on the domain.
- Ididntdothis 7y ago
  Most of them come down to elevating yourself through another tool so you can do what you need to. Think about things like SQL server or BeyondTrust. Working with pen testers helps a lot to get ideas :)
jon-wood 7y ago
I’d highly recommend not doing this, you’re giving ammunition should you ever find yourself in a situation where someone would like to fire you but doesn’t have a solid cause. As painful as it is if you’re unable to do your job because of IT policies escalate it up the management chain.
- Ididntdothis 7y ago
  I think I know what I am doing and I have backing from management. A lot of people do the same thing. Our choice is to either to not being able to work or do these hacks. If it were up to corporate IT we couldn’t do our job.

I rely on several of these “exploits” in order to be able to do my job on my work machines. I think even IT knows about these tricks but luckily they look the other way.

cosmie 7y ago

Besides the one referenced in the article, any tips (or references) about those tricks?

GordonS 7y ago
I got one I mentioned elsewhere here - if registry editing is disabled, just use a different registry app (there are some on Github that are better than the standard one anyway). Then you can undo group policy settings at will, as long as you know which registry keys to flip. A good site for this is: https://gpsearch.azurewebsites.net https://gpsearch.azurewebsites.net Some settings are set in the local security policy file, rather than in the registry. From memory, if you have local admin rights you have to specifically grant your user account full control to the adm files, then you can use the local security policy MMC snap in to change settings. Once you change things, they will periodically be set back, which is annoying, but the tip near the end of the article might work to stop that. Another tip is to install a dual boot version of Windows on an encrypted partition, and use that instead of the "official" install. Of course, this only works if you don't need frequent access to resources on the domain.
Ididntdothis 7y ago
Most of them come down to elevating yourself through another tool so you can do what you need to. Think about things like SQL server or BeyondTrust. Working with pen testers helps a lot to get ideas :)

jon-wood 7y ago

I’d highly recommend not doing this, you’re giving ammunition should you ever find yourself in a situation where someone would like to fire you but doesn’t have a solid cause. As painful as it is if you’re unable to do your job because of IT policies escalate it up the management chain.

Ididntdothis 7y ago
I think I know what I am doing and I have backing from management. A lot of people do the same thing. Our choice is to either to not being able to work or do these hacks. If it were up to corporate IT we couldn’t do our job.