update policy files for office 2013, version bump on some policy file…

…s, create policy files for office 2016. fixes #5
nsacyber · Jan 17, 2017 · 75cef8b · 75cef8b
1 parent 3ff71dc
commit 75cef8b
Show file tree

Hide file tree

Showing 7 changed files with 68 additions and 8 deletions.
diff --git a/Adobe Reader/Group Policy Objects/Computer/policy.json b/Adobe Reader/Group Policy Objects/Computer/policy.json
@@ -13,5 +13,5 @@
                     ],
     "PolicyTemplatePath":  ".\\..\\..\\",
     "PolicyTemplateType":  "Application",
-    "PolicyTemplateVersion":  "15.17.0.0"
+    "PolicyTemplateVersion":  "15.23.0.0"
 }
diff --git a/Adobe Reader/README.md b/Adobe Reader/README.md
@@ -37,7 +37,7 @@ Invoke-ApplySecureHostBaseline -Path '.\Secure-Host-Baseline' -PolicyNames 'Adob
 The [Compliance](./Compliance/) folder contains a Nessus (aka [ACAS](http://www.disa.mil/cybersecurity/network-defense/acas) in the DoD) .audit file to check compliance with the settings implemented in the Group Policy Object.
 
 ## Download Adobe Reader DC
-An offline installer for Adobe Reader DC can be downloaded from the [Adobe Reader DC enterprise download site](https://get.adobe.com/reader/enterprise/). The latest version (Version 2015.020.20042) can also be directly downloaded [here](https://ardownload.adobe.com/pub/adobe/reader/win/AcrobatDC/1502320053/AcroRdrDC1502320053_en_US.exe).
+An offline installer for Adobe Reader DC can be downloaded from the [Adobe Reader DC enterprise download site](https://get.adobe.com/reader/enterprise/). The latest version (Version 2015.023.20053) can also be directly downloaded [here](https://ardownload.adobe.com/pub/adobe/reader/win/AcrobatDC/1502320053/AcroRdrDC1502320053_en_US.exe).
 
 You can use the **Get-AdobeReaderOfflineInstaller** command in the Adobe Reader PowerShell module in the [scripts folder](./Scripts) to download a specific version of Adobe Reader DC. Example: **Get-AdobeReaderOfflineInstaller -Version '2015.023.20053'**. Adobe Reader DC version numbers that can be used with this script can be found on the [Adobe Reader for Windows 10 page](http://www.adobe.com/support/downloads/product.jsp?platform=windows&product=10). You can also use the **Get-AdobeReaderPatch -Version '2015.023.20053'** command to download just the .msp file to update an existing Adobe Reader install.
 

diff --git a/Chrome/Group Policy Objects/Computer/policy.json b/Chrome/Group Policy Objects/Computer/policy.json
@@ -13,5 +13,5 @@
                     ],
     "PolicyTemplatePath":  ".\\..\\..\\",
     "PolicyTemplateType":  "Application",
-    "PolicyTemplateVersion":  "52.0.2743.116"
+    "PolicyTemplateVersion":  "55.0.2883.87"
 }
diff --git a/Office/Office 2013/Group Policy Objects/policy.json b/Office/Office 2013/Group Policy Objects/policy.json
@@ -12,7 +12,7 @@
                         "Audit",
                         "Enforced"
                     ],
-    "PolicyTemplatePath":  ".\\..\\..\\",
+    "PolicyTemplatePath":  ".\\..\\",
     "PolicyTemplateType":  "Application",
     "PolicyTemplateVersion":  "15.0.0.0"
 }
diff --git a/Office/Office 2016/Group Policy Objects/Computer/policy.json b/Office/Office 2016/Group Policy Objects/Computer/policy.json
@@ -0,0 +1,17 @@
+{
+    "PolicyName":  "Office 2016",
+    "PolicyScopes":  [
+                         "Computer"
+                     ],
+    "PolicyTypes":  [
+                        "Domain",
+                        "Local"
+                    ],
+    "PolicyModes":  [
+                        "Audit",
+                        "Enforced"
+                    ],
+    "PolicyTemplatePath":  ".\\..\\..\\",
+    "PolicyTemplateType":  "Application",
+    "PolicyTemplateVersion":  "16.0.0.0"
+}
diff --git a/Office/Office 2016/Group Policy Objects/User/policy.json b/Office/Office 2016/Group Policy Objects/User/policy.json
@@ -0,0 +1,17 @@
+{
+    "PolicyName":  "Office 2016",
+    "PolicyScopes":  [
+                         "User"
+                     ],
+    "PolicyTypes":  [
+                        "Domain",
+                        "Local"
+                    ],
+    "PolicyModes":  [
+                        "Audit",
+                        "Enforced"
+                    ],
+    "PolicyTemplatePath":  ".\\..\\..\\",
+    "PolicyTemplateType":  "Application",
+    "PolicyTemplateVersion":  "16.0.0.0"
+}
diff --git a/Scripts/New-PolicyDefinitions.ps1 b/Scripts/New-PolicyDefinitions.ps1
@@ -18,7 +18,7 @@ $policy = [pscustomobject]@{
     'PolicyModes' = [string[]]@('Audit','Enforced');
     'PolicyTemplatePath' = '.\..\..\';
     'PolicyTemplateType' = 'Application';
-    'PolicyTemplateVersion' = '15.17.0.0';
+    'PolicyTemplateVersion' = '15.23.0.0';
 }
 
 $policyPath = "$basePath\Adobe Reader\Group Policy Objects\Computer"
@@ -86,7 +86,7 @@ $policy = [pscustomobject]@{
     'PolicyModes' = [string[]]@('Audit','Enforced');
     'PolicyTemplatePath' = '.\..\..\';
     'PolicyTemplateType' = 'Application';
-    'PolicyTemplateVersion' = '52.0.2743.116';
+    'PolicyTemplateVersion' = '55.0.2883.87';
 }
 
 $policyPath = "$basePath\Chrome\Group Policy Objects\Computer"
@@ -140,12 +140,38 @@ $policy = [pscustomobject]@{
     'PolicyScopes' = [string[]]@('Computer','User');
     'PolicyTypes' = [string[]]@('Domain','Local');
     'PolicyModes' = [string[]]@('Audit','Enforced');
-    'PolicyTemplatePath' = '.\..\..\';
+    'PolicyTemplatePath' = '.\..\';
     'PolicyTemplateType' = 'Application';
     'PolicyTemplateVersion' = '15.0.0.0';
 }
 
-$policyPath = "$basePath\Office\Group Policy Objects\Office 2013"
+$policyPath = "$basePath\Office\Office 2013\Group Policy Objects"
+$policy | ConvertTo-Json | Out-File -FilePath "$policyPath\policy.json" -Encoding ASCII -Force
+
+$policy = [pscustomobject]@{
+    'PolicyName' = 'Office 2016'
+    'PolicyScopes' = [string[]]@('Computer');
+    'PolicyTypes' = [string[]]@('Domain','Local');
+    'PolicyModes' = [string[]]@('Audit','Enforced');
+    'PolicyTemplatePath' = '.\..\..\';
+    'PolicyTemplateType' = 'Application';
+    'PolicyTemplateVersion' = '16.0.0.0';
+}
+
+$policyPath = "$basePath\Office\Office 2016\Group Policy Objects\Computer"
+$policy | ConvertTo-Json | Out-File -FilePath "$policyPath\policy.json" -Encoding ASCII -Force
+
+$policy = [pscustomobject]@{
+    'PolicyName' = 'Office 2016'
+    'PolicyScopes' = [string[]]@('User');
+    'PolicyTypes' = [string[]]@('Domain','Local');
+    'PolicyModes' = [string[]]@('Audit','Enforced');
+    'PolicyTemplatePath' = '.\..\..\';
+    'PolicyTemplateType' = 'Application';
+    'PolicyTemplateVersion' = '16.0.0.0';
+}
+
+$policyPath = "$basePath\Office\Office 2016\Group Policy Objects\User"
 $policy | ConvertTo-Json | Out-File -FilePath "$policyPath\policy.json" -Encoding ASCII -Force