Share via

Set_FDCC_LGPO: Updated for 2008 Q3

  • Article

[2009-04-15: Attachment removed. Bookmark this page for the latest versions of these utilities.]  

Set_FDCC_LGPO is a utility that we originally released in December that applies the Group Policy Objects provided by NIST on their web site to the Local Group Policy on the Windows XP or Windows Vista computer you run the tool on.

NIST recently released FDCC Major Version 1.0 (Q3 2008), and so this utility has also been updated to incorporate the new GPOs.  The updated utility is provided as an attachment to this blog post.

This update also incorporates improved logging of its SecEdit.exe results.  The updated source code and project files for this release have also been posted.  (For the time being, it's still a Visual Studio 2005 project.)

See the earlier post for documentation.

Comments

  • Anonymous
    January 01, 2003
    The comment has been removed

  • Anonymous
    January 01, 2003
    I have this same issue. Clean XP SP2 build with no additional applications or drivers. Sometimes I get the errors, sometimes I don't. Running Set_FDCC_LGPO in safe mode works every time.

  • Anonymous
    January 01, 2003
    [Mandy Tidwell] No.Unfortunately we don't have any current tools with that functionality.  However, that is an area we are pursuing and will post updates to this blog as they become available.    Are there any global files that we can revert an XP instance to its defaults, in effect, removing all the applied FDCC controls?  We are looking at this as a troubleshooting idea. Using secedit.exe /configure will not revert any controls to "not configured".  Also, using the sececit.exe /configure using the default secsetup.inf does some of the job but not all.

  • Anonymous
    January 01, 2003
    The comment has been removed

  • Anonymous
    January 01, 2003
    Are these systems domain-joined, or are they still workgroup? The next step would be to run Process Monitor (from sysinternals.com) to see where the sharing violations are and what is causing them.  I have yet to repro this on any system I've tested on. -- Aaron

  • Anonymous
    January 01, 2003
    Set_FDCC_LGPO - source code and Visual Studio project files, updated for Q3 2008 (FDCC Major Version 1.0)

  • Anonymous
    January 01, 2003
    JohnEudy, So for you running it in Safe Mode works everytime?

  • Anonymous
    January 01, 2003
    Just wondering if this issue has been resolved

  • Anonymous
    January 01, 2003
    I have not heard anything back or resolved the issue.  This problem is being reflected upon several makes and models of laptops/workstations.

  • Anonymous
    January 01, 2003
    Running Set_FDCC_LGPO reports 0 errors in Safe Mode for my case as well.   I ran Process Monitor while running Set_FDCC_LGPO.  What kind of items listed under Results am I to look for errors?  Other than SUCCESS and NO NAME FOUND there are 941 registry modifications associated with the process, resulting in: BUFFER OVERFLOW NO MORE ENTRIES CANNOT DELETE All of the BUFFER OVERFLOW items are associated with the path HKLMSystemCurrentControlSetServicesWinSock2ParametersProtocol_Catalog9Catalog_Entries All of the NO MORE ENTRIES and CANNOT DELETE items are associated with Group Policy Objects. Let me know what other information you need from me, I can elaborate wherever needed on the results I have come across.  Thanks again!

  • Anonymous
    January 01, 2003
    The comment has been removed