GPO Schedule Task CMD Command(Solving CVE-2021-24074)

GPO Schedule Task CMD Command

open “Group Policy Management”->Domain
Right click xxx.com to select “Create a GPO in this domain,and Link it here” ->Fill in a name such as “CVE-2021-24074 workaround”->OK
Edit the “CVE-2021-24074 workaround”->User Configuration->Preferences->Control Panel Settings->Scheduled Tasks

New->Schedyked Task(At least Windows 7)

Fill in a name such as “CVE-2021-24074 workaround” ,Click “Change User or Group”.

Add Triggers

Select “at log on” to trigger when the user logs in successfully.

Add Actions

Progra,/script : Process path used

C:\Windows\System32\cmd.exe

Add arguments : Command to be executed

/C netsh int ipv4 set global sourceroutingbehavior=drop

update computer Policy（If you don’t press this command, the computer can also update automatically after a period of time）

After configuration, you can find “CVE-2021-24074 workaround” in task scheduler

Note: when applying the configuration to the user machine, you need to add the new policy to the same identity classification as the user machine，such as

Test whether the configuration is successful

On the user machine that has been logged in again->open “regedit.msc” -> open path
-DisableIPSourcerRouting value is 2, the configuration is successful.