[NTSysADM] GPO Startupscript fails if DHCPMediaSense is enabled on Windows 10

2017-06-13 Thread Markus Klocker
Hi folks, on a quick computer system with Windows 10 on a SSD installed I saw that our startup script was failing with event 1129 followed by 1130: SupportInfo1 0 SupportInfo2 0 ErrorCode 267 ErrorDescription The

RE: [NTSysADM] Ransonware protection

2017-06-13 Thread Kennedy, Jim
Applocker, locking down the user profile. That is where most of it executes. And not just exe’s, don’t forget VBS. That will cover the exe and Word/VBS versions of the ransomeware. Block Office Macro’s if you can. We were able to block them for everyone except one person. Yea, a good spam

RE: [NTSysADM] GPO Startupscript fails if DHCPMediaSense is enabled on Windows 10

2017-06-13 Thread Miller Bonnie L.
It’s been several years, but whenever we run into this we start to investigate device firmware and driver updates, which often can correct the problem. Just do them one at a time, usually starting with the NIC driver, then bios, then chipset, and anything else you may find that could be

Re: [NTSysADM] Ransonware protection

2017-06-13 Thread Andrew S. Baker
+5 for Cylance. Bromium is decent, too. Regards, *ASB* *http://XeeMe.com/AndrewBaker * *Providing Expert Technology Consulting Services for the SMB market…* * GPG: *860D 40A1 4DA5 3AE1 B052 8F9F 07A1 F9D6 A549 8842 On Mon, Jun 12, 2017 at 9:05 AM, Webster

Re: [NTSysADM] Ransonware protection

2017-06-13 Thread Andrew S. Baker
Take a look at *Cylance *(www.cylance.com) and have them give you a demo. They have a super solid product that is excellent against even unknown malware (ransomware is not special in this sense). They gave a most impressive live demo at the Gartner Security & Risk Management Summit today. At