domain bypass

jigarastik

hello all,

can we bypass domain policy? if yes how?

Regards,
Jigar

JARVIS

How to enable the Windows Firewall, even though Domain Policies are prohibiting you from enabling it...
Consider the following scenario: you have a Windows XP laptop which is connected to a Windows Domain. In order to avoid having connectivity issues, the Domain Admins decided that it would be best to fully disable the Windows Firewall. They did this by disabling the Windows Firewall in the Domain Policies which are pushed and enforced on your computer.
This is of course not a recommended scenario, since it makes your laptop vulnerable for network attacks. Just like a sitting duck, waiting to be shot...
Even when you have local admin privileges, you cannot just enable the firewall again, since the configuration options are grayed out, as you can see in the following screenshot:

Now when you are connecting to an unsafe network like a hotel network or an airport wireless hotspot, you would want to enable the Windows Firewall to be more secure.
How to remove the pushed Windows Firewall configuration?Pushed Windows Domain policies are periodically pushed by the Domain Controller to your machine.  Typically all these settings are stored in the Windows registry.
So in order to remove this unsafe configuration when you are not connected to the domain, it is possible to remove the pushed Windows Firewall configuration from the registry so that you can enable your firewall.
You can do this using the following steps:

• Make sure you are not connected to the Windows Domain
• Open the Registry Editor
• Navigate to the following key:
  HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall
  
• Remove the key WindowsFirewall
• Reboot your computer (necessary for Windows to re-apply the policies stored in the registry)
  

After you have rebooted, the Windows Firewall configuration options will no longer be grayed out . You are free to enable your firewall and to not allow any exceptions to the configuration.
Is there any risk to this?There is no real risk when you remove the key from the registry. The next time you are connected to the Windows domain, the policies will be updated and the key will be added again to the registry.

jigarastik

Hey thanks for reply, however, I have to login through domain policy only, due to this even pendrive is not accessible.

Regards,

JARVIS

jigarastik 2-5-2018 10:08 AM
Hey thanks for reply, however, I have to login through domain policy only, due to this even pendrive ...

any malware on pendrive

suyognyahoo

Ok, that's awesome

suyognyahoo

How do we bypass it then with this.

JARVIS

suyognyahoo 4-5-2018 09:25 AM
How do we bypass it then with this.

what bro say clearly

jigarastik

NO OUR COMPANY'S IT HEAD HAS RUN THE DOMAIN POLICY FOR ALL USERS AND PEN DRIVE IS BLOCKED.

JARVIS

Ya its for security u can break them

sanjurajin

jigarastik 4-5-2018 12:31 PM
NO OUR COMPANY'S IT HEAD HAS RUN THE DOMAIN POLICY FOR ALL USERS AND PEN DRIVE IS BLOCKED.

How can i use pen drive in this condition?