Title
#general
f

fritz

12/16/2020, 1:50 PM
It is possible that this data could be retrieved via a workaround (like the
kolide_wmi
table) but I have not investigated it much and couldn't say for certain.
āœ… 1
2:12 PM
@ET I just checked and I cannot retrieve this data using WMI either.
e

ET

12/16/2020, 2:15 PM
Yes I Know.
2:16 PM
I have problem here, I can get this data from powershell script but if there are GPO I don't see this rules.
f

fritz

12/16/2020, 2:29 PM
Yeah, I am unfortunately out of my depth when it comes to GPO/Windows Server
e

ET

12/16/2020, 2:30 PM
Thanks ! @fritz
f

fritz

12/16/2020, 2:30 PM
Sorry I couldn't be more help!
šŸ’Ŗ 1
CptOfEvilMinions

CptOfEvilMinions

12/16/2020, 3:15 PM
@ET I am just offering an idea here. I think most GPO settings are actually just registry keys. I would use the
registry
table to look up those Registry keys. You can use the link below to search for GPO options and it will return the Registry path for that setting. https://gpsearch.azurewebsites.net/
šŸ’Ŗ 1
3:17 PM
For example, the Windows Domain Firewall status is at the following path:
HKEY_LOCAL_MACHINE:\Software\Policies\Microsoft\WindowsFirewall\DomainProfile\EnableFirewall
e

ET

12/16/2020, 3:18 PM
Sounds good, let me check šŸ™‚
CptOfEvilMinions

CptOfEvilMinions

12/16/2020, 3:20 PM
Iā€™m curious to know if this works so let us know šŸ™‚
e

ET

12/16/2020, 3:28 PM
Wow!
3:29 PM
This is really help me!
3:30 PM
šŸ¤œšŸ¤›