CYB 220 Module Three Activity Template You are provided with a GNS3 environment that has two virtual PCs. One of the PCs is hardened, and you will harden the second PC to match the settings of the...

To complete this assignment, review the prompt and grading rubric in theModule Three Activity Guidelines and RubricPDFdocument. You will also need to access theModule Three Activity Template Word Documentfile and theInfoSecenvironment.


CYB 220 Module Three Activity Template You are provided with a GNS3 environment that has two virtual PCs. One of the PCs is hardened, and you will harden the second PC to match the settings of the hardened PC. The group policy changes that are different between the two PCs are listed in the table below. Fill out the Path to GPO Setting column in the table below. Use the Windows 10 and Windows Server 2016 Policy Settings spreadsheet to search for the specific settings that need to be modified. Group Policy Name Path to GPO Setting Hide specified Control Panel items (hide user accounts) Remove Task Manager Remove Recycle Bin icon from desktop Disable delete notifications on all volumes Turn off printing over HTTP Turn on menu bar by default When you have filled out the table, insert screenshots below for each changed setting within the GPO. A. Hide Specified Control panel items (hide user accounts) B. Remove Task Manager C. Remove Recycle Bin icon from desktop D. Disable delete notifications on all volumes E. Turn off printing over HTTP F. Turn on menu bar by default 1 CYB 220 Module Three Activity Guidelines and Rubric Overview You are provided with a GNS3 environment that has a virtual PC that you are asked to harden. The group policy settings you need to change are listed in the table in the Module Three Activity Template document. This activity is an example of a real-world configuration activity that uses Windows resources to help harden the systems. The Windows 10 and Windows Server 2016 Policy Settings spreadsheet linked in the template is published and maintained by Microsoft to help individuals find specific settings in the GPO. Use this spreadsheet to search for the specific settings that need to be modified. You will use this spreadsheet again in Project One, due in Module Five. The use of GNS3 provides a sandbox environment for you to safely configure the Windows desktop and test to ensure your changes work before rolling them out to production machines. Access the GNS3 environment by navigating to the GNS3 Sandboxing - Part Two lab. You will need the information in the table below to complete this activity. Usernames and Passwords Device Username Password PC_NOT_Hardened Student password Admin Passw0rd Prompt Submit the Module Three Activity Template document with the filled-in paths to the group policies, and a screenshot of each changed setting within the GPO. Specifically, the following critical elements must be addressed: I. Fill in the Path to GPO Setting column in the table, including the information in both columns D and E in the linked Microsoft spreadsheet. II. Provide screenshots of each changed setting within the GPO: A. Hide specified Control Panel items B. Remove Task Manager C. Remove Recycle Bin icon from desktop D. Disable delete notifications on all volumes E. Turn off printing over HTTP F. Turn on menu bar by default https://www.microsoft.com/en-us/download/confirmation.aspx?id=25250 2 Rubric Guidelines for Submission: You should submit the completed Module Three Activity Template document, including an updated table and all necessary screenshots. Use a file name that includes the course code, the assignment title, and your name—for example, CYB_123_Assignment_Firstname_Lastname.docx.. Critical Elements Proficient (100%) Not Evident (0%) Value Path to GPO Setting Fills in Path to GPO Setting column Does not fill in Path to GPO Setting column 40 Changed Setting: Hide Specified Control Panel Items Provides screenshot of accurately changed setting within the GPO Does not provide screenshot of accurately changed setting in the GPO 10 Changed Setting: Remove Task Manager Provides screenshot of accurately changed setting within the GPO Does not provide screenshot of accurately changed setting in the GPO 10 Changed Setting: Remove Recycle Bin Icon From Desktop Provides screenshot of accurately changed setting within the GPO Does not provide screenshot of accurately changed setting in the GPO 10 Changed Setting: Disable Delete Notifications on All Volumes Provides screenshot of accurately changed setting within the GPO Does not provide screenshot of accurately changed setting in the GPO 10 Changed Setting: Turn Off Printing Over HTTP Provides screenshot of accurately changed setting within the GPO Does not provide screenshot of accurately changed setting in the GPO 10 Changed Setting: Turn On Menu Bar by Default Provides screenshot of accurately changed setting within the GPO Does not provide screenshot of accurately changed setting in the GPO 10 Total 100% Sheet1 Assignment TaskFile namePolicy Setting NameScopePolicy PathRegistry InformationSupported OnHelp Text Hide Specified Control Panel Itemscontrolpanel.admxHide specified Control Panel itemsUserControl PanelHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisallowCpl HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowCplAt least Windows 2000This setting allows you to display or hide specified Control Panel items, such as Mouse, System, or Personalization, from the Control Panel window and the Start screen. The setting affects the Start screen and Control Panel window, as well as other ways to access Control Panel items, such as shortcuts in Help and Support or command lines that use control.exe. This policy has no effect on items displayed in PC settings. If you enable this setting, you can select specific items not to display on the Control Panel window and the Start screen. To hide a Control Panel item, enable this policy setting and click Show to access the list of disallowed Control Panel items. In the Show Contents dialog box in the Value column, enter the Control Panel item's canonical name. For example, enter Microsoft.Mouse, Microsoft.System, or Microsoft.Personalization. Note: For Windows Vista, Windows Server 2008, and earlier versions of Windows, the module name should be entered, for example timedate.cpl or inetcpl.cpl. If a Control Panel item does not have a CPL file, or the CPL file contains multiple applets, then its module name and string resource identification number should be entered, for example @systemcpl.dll,-1 for System, or @themecpl.dll,-1 for Personalization. A complete list of canonical and module names can be found in MSDN by searching "Control Panel items". If both the "Hide specified Control Panel items" setting and the "Show only specified Control Panel items" setting are enabled, the "Show only specified Control Panel items" setting is ignored. Note: The Display Control Panel item cannot be hidden in the Desktop context menu by using this setting. To hide the Display Control Panel item and prevent users from modifying the computer's display settings use the "Disable Display Control Panel" setting instead. Note: To hide pages in the System Settings app, use the "Settings Page Visibility" setting under Computer Configuration. Remove Task Managerctrlaltdel.admxRemove Task ManagerUserSystem\Ctrl+Alt+Del OptionsHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableTaskMgrAt least Windows 2000This policy setting prevents users from starting Task Manager. Task Manager (taskmgr.exe) lets users start and stop programs; monitor the performance of their computers; view and monitor all programs running on their computers, including system services; find the executable names of programs; and change the priority of the process in which programs run. If you enable this policy setting, users will not be able to access Task Manager. If users try to start Task Manager, a message appears explaining that a policy prevents the action. If you disable or do not configure this policy setting, users can access Task Manager to start and stop programs, monitor the performance of their computers, view and monitor all programs running on their computers, including system services, find the executable names of programs, and change the priority of the process in which programs run. Remove Recycle Bin Icon From Desktopdesktop.admxRemove Recycle Bin icon from desktopUserDesktopHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{645FF040-5081-101B-9F08-00AA002F954E}At least Windows Server 2003 operating systems or Windows XP ProfessionalRemoves most occurrences of the Recycle Bin icon. This setting removes the Recycle Bin icon from the desktop, from File Explorer, from programs that use the File Explorer windows, and from the standard Open dialog box. This setting does not prevent the user from using other methods to gain access to the contents of the Recycle Bin folder. Note: To make changes to this setting effective, you must log off and then log back on. Disable Delete Notifications On All Volumesfilesys.admxDisable delete notifications on all volumesMachineSystem\FilesystemHKLM\System\CurrentControlSet\Policies!DisableDeleteNotificationAt least Windows Server 2008 R2 or Windows 7Delete notification is a feature that notifies the underlying storage device of clusters that are freed due to a file delete operation. A value of 0, the default, will enable delete notifications for all volumes. A value of 1 will disable delete notifications for all volumes. Turn Off Printing Over HTTPicm.admxTurn off printing over HTTPMachineSystem\Internet Communication Management\Internet Communication settingsHKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrintingAt least Windows Server 2003 operating systems with SP1 or Windows XP Professional with SP2This policy setting specifies whether to allow printing over HTTP from this client. Printing over HTTP allows a client to print to printers on the intranet as well as the Internet. Note: This policy setting affects the client side of Internet printing only. It does not prevent this computer from acting as an Internet Printing server and making its shared printers available via HTTP. If you enable this policy setting, it prevents this client from printing to Internet printers over HTTP. If you disable or do not configure this policy setting, users can choose to print to Internet printers over HTTP. Also, see the "Web-based printing" policy setting in Computer Configuration/Administrative Templates/Printers. Turn On Menu Bar By Defaultexplorer.admxDisplay the menu bar in File ExplorerUserWindows Components\File ExplorerHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!AlwaysShowClassicMenuAt least Windows VistaThis policy setting configures File Explorer to always display the menu bar. Note: By default, the menu bar is not displayed in File Explorer. If you enable this policy setting, the menu bar will be displayed in File Explorer. If you disable or do not configure this policy setting, the menu bar will not be displayed in File Explorer. Note: When the menu bar is not displayed, users can access the menu bar by pressing the 'ALT' key. Sheet2 Sheet3