Methods and Systems of Information Protection, Information Security

VERIFICATION OF DOMAIN GPO STABILITY MECHANISMS IN A CORPORATE NETWORK

D. S. Dvornikov , M. A. Kostionova
UDC: 004.056.53 Published: 01.09.2026 Issue: Vol. 3 No. 011 (2026): Professionalitet, 2026 DOI: 10.24412/3033-9359-2026-011-15-23
Download PDF

Abstract

This paper examines one user setting, DisableTaskMgr, on a Windows Active Directory laboratory testbed. The testbed includes a Windows Server 2022 domain controller and a Windows 11 client. The aim is to compare the registry value and Task Manager behavior after applying a domain GPO, attempting local changes, and disconnecting the client from the domain controller. The policy is linked to a specified organizational unit and tested with one user account. The article presents policy-update commands, reported policy application, and attempts to modify the controlled value. It considers an ordinary user, a local administrator, an active session without network connectivity, and a cached sign-in after reboot. In the displayed scenarios, the domain restriction was applied and restored by a normal policy update after an administrator changed the local value. Without connectivity, the previously applied value persisted; the ordinary user could not write a different value. Registry security descriptors and the internal persistence mechanism were not separately examined. Block Inheritance, Enforced, the complete LSDOU model, and other bypass methods were not tested. Results concern one setting, organizational unit, policy, and configuration. The material is a teaching example of applying and restoring a domain setting. It distinguishes observed parameter behavior from a general assessment of centralized-management security and does not characterize all Windows versions or physical-access scenarios.

Online viewer

References

  1. Krause, J. Mastering Windows Group Policy: Control and secure your Active Directory environment with Group Policy / J. Krause. – Birmingham : Packt Publishing, 2018. – 390 p. – Текст : непосредственный.
  2. Arya, K. Windows Group Policy Troubleshooting: A Best Practice Guide for Managing Users and PCs Through Group Policy / K. Arya. – Apress, 2016. – 200 p. – Текст : непосредственный.
  3. Доменные политики и GPO в Active Directory: полное руководство по настройке и безопасности [Электронный ресурс] // Корпоративный блог Инфратех. – URL: https://blog.infra-tech.ru/domennye-politiki/ (дата обращения: 20.02.2026). – Текст : электронный.
  4. Об утверждении Требований о защите информации, не составляющей государственную тайну, содержащейся в государственных информационных системах : приказ ФСТЭК России от 11.02.2013 № 17 [Электронный ресурс]. – URL: https://rppa.pro/npa/fstek17_11.02.2013 (дата обращения: 21.02.2026). – Текст : электронный.
  5. Group Policy Overview [Электронный ресурс] // Microsoft Learn. – URL: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/group-policy/group-policy-overview (дата обращения: 21.02.2026). – Текст : электронный.
  6. LGPO.exe — Local Group Policy Object Utility [Электронный ресурс] // Microsoft Security. – URL: https://www.microsoft.com/en-us/download/details.aspx?id=55319 (дата обращения: 17.02.2026). – Текст : электронный.
  7. Get-GPResultantSetOfPolicy [Электронный ресурс] // Microsoft Learn. – URL: https://learn.microsoft.com/en-us/powershell/module/grouppolicy/get-gpresultantsetofpolicy (дата обращения: 17.02.2026). – Текст : электронный.

License

Copyright (c) 2026 D. S. Dvornikov, M. A. Kostionova (Author)

Creative Commons Attribution (CC BY) 4.0

Keywords

Windows Active Directory GPO Group Policy LSDOU information security domain infrastructure