diff --git a/Adobe Reader/Group Policy Objects/Computer/policy.json b/Adobe Reader/Group Policy Objects/Computer/policy.json index 197316f..cabd61d 100644 --- a/Adobe Reader/Group Policy Objects/Computer/policy.json +++ b/Adobe Reader/Group Policy Objects/Computer/policy.json @@ -13,5 +13,5 @@ ], "PolicyTemplatePath": ".\\..\\..\\", "PolicyTemplateType": "Application", - "PolicyTemplateVersion": "15.17.0.0" + "PolicyTemplateVersion": "15.23.0.0" } diff --git a/Adobe Reader/README.md b/Adobe Reader/README.md index 1fafb55..6bfe340 100644 --- a/Adobe Reader/README.md +++ b/Adobe Reader/README.md @@ -37,7 +37,7 @@ Invoke-ApplySecureHostBaseline -Path '.\Secure-Host-Baseline' -PolicyNames 'Adob The [Compliance](./Compliance/) folder contains a Nessus (aka [ACAS](http://www.disa.mil/cybersecurity/network-defense/acas) in the DoD) .audit file to check compliance with the settings implemented in the Group Policy Object. ## Download Adobe Reader DC -An offline installer for Adobe Reader DC can be downloaded from the [Adobe Reader DC enterprise download site](https://get.adobe.com/reader/enterprise/). The latest version (Version 2015.020.20042) can also be directly downloaded [here](https://ardownload.adobe.com/pub/adobe/reader/win/AcrobatDC/1502320053/AcroRdrDC1502320053_en_US.exe). +An offline installer for Adobe Reader DC can be downloaded from the [Adobe Reader DC enterprise download site](https://get.adobe.com/reader/enterprise/). The latest version (Version 2015.023.20053) can also be directly downloaded [here](https://ardownload.adobe.com/pub/adobe/reader/win/AcrobatDC/1502320053/AcroRdrDC1502320053_en_US.exe). You can use the **Get-AdobeReaderOfflineInstaller** command in the Adobe Reader PowerShell module in the [scripts folder](./Scripts) to download a specific version of Adobe Reader DC. Example: **Get-AdobeReaderOfflineInstaller -Version '2015.023.20053'**. Adobe Reader DC version numbers that can be used with this script can be found on the [Adobe Reader for Windows 10 page](http://www.adobe.com/support/downloads/product.jsp?platform=windows&product=10). You can also use the **Get-AdobeReaderPatch -Version '2015.023.20053'** command to download just the .msp file to update an existing Adobe Reader install. diff --git a/Chrome/Group Policy Objects/Computer/policy.json b/Chrome/Group Policy Objects/Computer/policy.json index b25b3e0..113b68d 100644 --- a/Chrome/Group Policy Objects/Computer/policy.json +++ b/Chrome/Group Policy Objects/Computer/policy.json @@ -13,5 +13,5 @@ ], "PolicyTemplatePath": ".\\..\\..\\", "PolicyTemplateType": "Application", - "PolicyTemplateVersion": "52.0.2743.116" + "PolicyTemplateVersion": "55.0.2883.87" } diff --git a/Office/Office 2013/Group Policy Objects/policy.json b/Office/Office 2013/Group Policy Objects/policy.json index 01ca655..196fb81 100644 --- a/Office/Office 2013/Group Policy Objects/policy.json +++ b/Office/Office 2013/Group Policy Objects/policy.json @@ -12,7 +12,7 @@ "Audit", "Enforced" ], - "PolicyTemplatePath": ".\\..\\..\\", + "PolicyTemplatePath": ".\\..\\", "PolicyTemplateType": "Application", "PolicyTemplateVersion": "15.0.0.0" } diff --git a/Office/Office 2016/Group Policy Objects/Computer/policy.json b/Office/Office 2016/Group Policy Objects/Computer/policy.json new file mode 100644 index 0000000..9655b8f --- /dev/null +++ b/Office/Office 2016/Group Policy Objects/Computer/policy.json @@ -0,0 +1,17 @@ +{ + "PolicyName": "Office 2016", + "PolicyScopes": [ + "Computer" + ], + "PolicyTypes": [ + "Domain", + "Local" + ], + "PolicyModes": [ + "Audit", + "Enforced" + ], + "PolicyTemplatePath": ".\\..\\..\\", + "PolicyTemplateType": "Application", + "PolicyTemplateVersion": "16.0.0.0" +} diff --git a/Office/Office 2016/Group Policy Objects/User/policy.json b/Office/Office 2016/Group Policy Objects/User/policy.json new file mode 100644 index 0000000..232fb29 --- /dev/null +++ b/Office/Office 2016/Group Policy Objects/User/policy.json @@ -0,0 +1,17 @@ +{ + "PolicyName": "Office 2016", + "PolicyScopes": [ + "User" + ], + "PolicyTypes": [ + "Domain", + "Local" + ], + "PolicyModes": [ + "Audit", + "Enforced" + ], + "PolicyTemplatePath": ".\\..\\..\\", + "PolicyTemplateType": "Application", + "PolicyTemplateVersion": "16.0.0.0" +} diff --git a/Scripts/New-PolicyDefinitions.ps1 b/Scripts/New-PolicyDefinitions.ps1 index acc0fa5..4910252 100644 --- a/Scripts/New-PolicyDefinitions.ps1 +++ b/Scripts/New-PolicyDefinitions.ps1 @@ -18,7 +18,7 @@ $policy = [pscustomobject]@{ 'PolicyModes' = [string[]]@('Audit','Enforced'); 'PolicyTemplatePath' = '.\..\..\'; 'PolicyTemplateType' = 'Application'; - 'PolicyTemplateVersion' = '15.17.0.0'; + 'PolicyTemplateVersion' = '15.23.0.0'; } $policyPath = "$basePath\Adobe Reader\Group Policy Objects\Computer" @@ -86,7 +86,7 @@ $policy = [pscustomobject]@{ 'PolicyModes' = [string[]]@('Audit','Enforced'); 'PolicyTemplatePath' = '.\..\..\'; 'PolicyTemplateType' = 'Application'; - 'PolicyTemplateVersion' = '52.0.2743.116'; + 'PolicyTemplateVersion' = '55.0.2883.87'; } $policyPath = "$basePath\Chrome\Group Policy Objects\Computer" @@ -140,12 +140,38 @@ $policy = [pscustomobject]@{ 'PolicyScopes' = [string[]]@('Computer','User'); 'PolicyTypes' = [string[]]@('Domain','Local'); 'PolicyModes' = [string[]]@('Audit','Enforced'); - 'PolicyTemplatePath' = '.\..\..\'; + 'PolicyTemplatePath' = '.\..\'; 'PolicyTemplateType' = 'Application'; 'PolicyTemplateVersion' = '15.0.0.0'; } -$policyPath = "$basePath\Office\Group Policy Objects\Office 2013" +$policyPath = "$basePath\Office\Office 2013\Group Policy Objects" +$policy | ConvertTo-Json | Out-File -FilePath "$policyPath\policy.json" -Encoding ASCII -Force + +$policy = [pscustomobject]@{ + 'PolicyName' = 'Office 2016' + 'PolicyScopes' = [string[]]@('Computer'); + 'PolicyTypes' = [string[]]@('Domain','Local'); + 'PolicyModes' = [string[]]@('Audit','Enforced'); + 'PolicyTemplatePath' = '.\..\..\'; + 'PolicyTemplateType' = 'Application'; + 'PolicyTemplateVersion' = '16.0.0.0'; +} + +$policyPath = "$basePath\Office\Office 2016\Group Policy Objects\Computer" +$policy | ConvertTo-Json | Out-File -FilePath "$policyPath\policy.json" -Encoding ASCII -Force + +$policy = [pscustomobject]@{ + 'PolicyName' = 'Office 2016' + 'PolicyScopes' = [string[]]@('User'); + 'PolicyTypes' = [string[]]@('Domain','Local'); + 'PolicyModes' = [string[]]@('Audit','Enforced'); + 'PolicyTemplatePath' = '.\..\..\'; + 'PolicyTemplateType' = 'Application'; + 'PolicyTemplateVersion' = '16.0.0.0'; +} + +$policyPath = "$basePath\Office\Office 2016\Group Policy Objects\User" $policy | ConvertTo-Json | Out-File -FilePath "$policyPath\policy.json" -Encoding ASCII -Force