Browse › Cyber Security Incident Response

Can You Use GPOs and Security Templates as Part of IR?

Advanced

Part of Cyber Security Incident Response Topic: Blue Team

Counts towards

Access

StationX Infrastructure Labs — 3 attempts per lab

🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab

Already have access? Sign in.

New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.

What you'll do

In this lab, you will use GPOs and security templates as part of IR.

Create a new domain GPO
Define and enforce GPO settings related to account lockout, password policies, and auditing
Create a domain GPO to block access to the Control Panel, PC settings, and the Registry Editor
Verify that GPO settings have been applied
Use security templates to manage a Windows Server configuration

Note: Once you begin the lab, you will not be able to pause, save, or return to your lab. Please ensure that you have set aside enough time to complete the lab before you start.

⏱ About 60 minutes
Counts towards: CompTIA CySA+ (exam CS0-004)

Roadmaps that use this lab

CompTIA CySA+ (CS0-004) — step 5: Incident response
SOC Analyst — career path — step 6: Analyst certification
Threat Hunter — career path — step 3: The analyst certification
Digital Forensics Analyst — career path — step 5: Incident response, certified
Threat Intelligence Analyst — career path — step 2: SOC grounding, certified