You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: Wiki posts/Harden System Security/Group Policy Editor.md
+1Lines changed: 1 addition & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -21,6 +21,7 @@ In addition to retrieving the system's effective machine policies, you can also
21
21
## Edit Group Policy Values
22
22
23
23
You can seamlessly edit the value of any loaded policy directly from the UI by right-clicking a policy and selecting **Edit**. The editor provides a rigorous, real-time input validation system tailored to the specific Registry Value Type of the policy:
24
+
24
25
***REG_DWORD & REG_QWORD**: Ensures the input is a valid 32-bit or 64-bit integer.
25
26
***REG_BINARY & REG_NONE**: Validates hexadecimal strings, filters invalid characters, and ensures an even number of characters.
26
27
***REG_MULTI_SZ**: Provides a multi-line text input that automatically handles null separators for easily editing string arrays.
***Service Type** (Kernel Driver, User Service, Win32 Own Process, etc.)
24
25
***Error Control**
25
26
***Launch Protected**
26
27
***Service Flags**
28
+
27
29
***Dynamic Filter Counts:** By default, the app features dynamic filtering. As you check and uncheck filters, the numbers next to every other category automatically update in real-time to show you exactly how many services meet the combined active criteria. If you prefer the numbers to stay static representing the total count regardless of other filters, you can disable this toggle this button off.
28
30
29
31
<br>
@@ -42,9 +44,11 @@ Finding a specific service in a list of hundreds is effortless.
42
44
Services are presented in a clean, grouped list. Each item displays the service name, display name, color-coded running state, and executable name at a glance. Clicking on any service expands it to reveal comprehensive details split into two tabs:
43
45
44
46
### 1. Configuration Details
47
+
45
48
This section provides deep insights into how the service is configured to run, including its Raw Path, Process ID (PID), Service Group, Run As Account, Controls Accepted, Dependencies, Service SID Type, Required Privileges, PreShutdown Timeout, Exit Codes, Triggers, and Failure Actions.
46
49
47
50
### 2. Portable Executable Metadata
51
+
48
52
If the service is backed by a standard executable file, this tab displays metadata extracted directly from the file. This includes File Description, Company Name, Product Name, File and Product Versions, Original Name, Internal Name, Legal Copyright, Trademarks, and Special Build notes.
49
53
50
54
> [!TIP]
@@ -57,10 +61,13 @@ If the service is backed by a standard executable file, this tab displays metada
57
61
You have full control over the state and configuration of any service directly from the interface.
58
62
59
63
### State Control
64
+
60
65
Right-click (or open the context menu) on any service to access the **State Control** menu. From here, you can instantly **Start**, **Stop**, **Pause**, **Resume**, or **Restart** the service. The app will wait and verify the state change before refreshing the UI.
61
66
62
67
### Modifying Configurations
68
+
63
69
Inside the Configuration Details tab, you can use the dropdown menus to change core service behaviors. Once you change a value, a green "Save" button will appear to commit the change:
70
+
64
71
***Start Type:** Switch the service between Boot Start, System Start, Auto Start, Demand / Manual, Disabled, or Auto Start (Delayed).
65
72
***Service Type:** Modify the structural type of the service.
66
73
***Error Control:** Change how the system reacts (Ignore, Normal, Severe, Critical) if the service fails to load during boot.
@@ -70,7 +77,9 @@ Inside the Configuration Details tab, you can use the dropdown menus to change c
70
77
> Changing the **Service Type** to an incorrect value can lead to boot failures if it is a critical service. Additionally, setting a service to a **Launch Protected** mode cannot be reverted through the app due to strict Windows security boundaries; restoring it will require manually editing the Registry and rebooting. **The app will prompt you for confirmation before making these sensitive changes.**
71
78
72
79
### Advanced Actions
80
+
73
81
The context menu provides several shortcuts to manage the service at the system level:
82
+
74
83
***Open in Registry:** Instantly opens `regedit.exe` and automatically navigates directly to the specific service's key in the Windows Registry.
75
84
***Browse:** Opens Windows File Explorer and highlights the underlying executable file.
76
85
***Search:** Performs a quick web search of the service name and display name to help you identify unknown or suspicious services.
0 commit comments