Skip to content

Instantly share code, notes, and snippets.

@0xAJStrike
Forked from mattifestation/CustomASRPolicy.xml
Created March 6, 2022 20:13
Show Gist options
  • Select an option

  • Save 0xAJStrike/473facede08e1d97096c3372a8c7938b to your computer and use it in GitHub Desktop.

Select an option

Save 0xAJStrike/473facede08e1d97096c3372a8c7938b to your computer and use it in GitHub Desktop.

Revisions

  1. @mattifestation mattifestation created this gist Jan 25, 2018.
    63 changes: 63 additions & 0 deletions CustomASRPolicy.xml
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,63 @@
    <?xml version="1.0" encoding="utf-8"?>
    <SiPolicy xmlns="urn:schemas-microsoft-com:sipolicy">
    <VersionEx>10.0.0.0</VersionEx>
    <PolicyTypeID>{A244370E-44C9-4C06-B551-F6016E563076}</PolicyTypeID>
    <PlatformID>{2E07F7E4-194C-4D20-B7C9-6F44A6C5A234}</PlatformID>
    <Rules>
    <Rule>
    <Option>Enabled:Unsigned System Integrity Policy</Option>
    </Rule>
    <Rule>
    <Option>Enabled:Advanced Boot Options Menu</Option>
    </Rule>
    <Rule>
    <Option>Enabled:UMCI</Option>
    </Rule>
    <Rule>
    <Option>Enabled:Update Policy No Reboot</Option>
    </Rule>
    </Rules>
    <!--EKUS-->
    <EKUs />
    <!--File Rules-->
    <FileRules>
    <Allow ID="ID_ALLOW_A_1_0" FriendlyName="" FileName="*" />
    <Allow ID="ID_ALLOW_A_2_0" FriendlyName="" FileName="*" />
    <Deny ID="ID_DENY_D_1_1" FriendlyName="C:\Windows\System32\scrobj.dll FileRule" FileName="scrobj.dll" MinimumFileVersion="65535.65535.65535.65535" AppIDs="REGSVR32.EXE" />
    </FileRules>
    <!--Signers-->
    <Signers />
    <!--Driver Signing Scenarios-->
    <SigningScenarios>
    <SigningScenario Value="131" ID="ID_SIGNINGSCENARIO_DRIVERS_1" FriendlyName="Auto generated policy on 01-25-2018">
    <ProductSigners>
    <FileRulesRef>
    <FileRuleRef RuleID="ID_ALLOW_A_1_0" />
    </FileRulesRef>
    </ProductSigners>
    </SigningScenario>
    <SigningScenario Value="12" ID="ID_SIGNINGSCENARIO_WINDOWS" FriendlyName="Auto generated policy on 01-25-2018">
    <ProductSigners>
    <FileRulesRef>
    <FileRuleRef RuleID="ID_ALLOW_A_2_0" />
    <FileRuleRef RuleID="ID_DENY_D_1_1" />
    </FileRulesRef>
    </ProductSigners>
    </SigningScenario>
    </SigningScenarios>
    <UpdatePolicySigners />
    <CiSigners />
    <HvciOptions>0</HvciOptions>
    <Settings>
    <Setting Provider="PolicyInfo" Key="Information" ValueName="Name">
    <Value>
    <String>AllowAll</String>
    </Value>
    </Setting>
    <Setting Provider="PolicyInfo" Key="Information" ValueName="Id">
    <Value>
    <String>041417</String>
    </Value>
    </Setting>
    </Settings>
    </SiPolicy>