Performancing Metrics

Group Policy Team Blog - Site Home - TechNet Blogs
Blog - Title

Group Policy Team Blog

  • GP Editorial: Group Policy Best Practices

    Lots of people ask the Group Policy Team: What are the best settings to configure? What is the most secure GPO we can deploy? I've been talking about this a lot with the Group Policy customer support folks, and the topic resulted in the following editorial...
  • Listing all GPOs in the current forest

    This post was written by Judith, a technical writer for Group Policy. This is the second post in a series on ways to use Powershell with Group Policy. See the first post on getting started with RSAT and Group Policy Let’s say I have a forest and I’d like...
  • Listing Disabled GPOs in a Forest

    This blog post is written by Judith, our technical writer, and based on an old blog post by Jeffrey Snover. ( http://blogs.msdn.com/b/powershell/archive/2007/01/11/sorting-out-groupby.aspx ) Jeffrey wrote a piece that showed how to sort system services...
  • Copy and Merge GPOs through Powershell

    Ashley McGlone has a great script up for merging GPOs together through powershell. I wish I had this script five years ago. At the time I was searching for a way to combine or merge GPOs, but there simply wasn’t a way to do it. And today there still isn...
  • More powershell & group policy

    I do not know about you but I LOVE PowerShell, especially the Group Policy cmdlets. Unfortunately, I didn’t have too many opportunities to really use them - but luckily got a chance in preparation for a presentation where I would demo a script that...
  • Restoring Default Domain Policies and SYSVOL to their defaults

    We have stated a number of times through a number of forums that its not a great practice to muck around with the Default Domain Policy and the Default Domain Controllers Policy. In fact its actually a really bad practice...same goes with the SYSVOL....
  • Tales from the Community: Enforced vs. Block Inheritance

    From the Group Policy TechNet Forum, featuring Florian, ever-helpful Group Policy MVP: Hi What is the difference between “no-override” and “block policy inheritance” in group policy option? Regards M. Hey M.! It looks like you’re trying...
  • Tales from the Community - Deleting a registry value

    Tales from the Community – Deleting registry values Okay, I've seen this question in the Technet Forums that basically goes like this: " Hey I have this reg script that deletes a value off the registry for me. The .reg file does [HKEY_CLASSES_ROOT...
  • AGPM Least Privilege for Child Domain

    Michael has covered “least privilege” for AGPM before (the Active Directory team followed up with a bit more detail). However, those scenarios are for single-domains. What if you have a forest where you want to manage all the child domains using AGPM...
  • Group Policy Preferences: Deploy Printer Settings

    We received an email from Daniel today. He’s done a great blog post on how to use Group Policy Preferences to deploy printer settings to workstations. I'm sure Lilia is with me on this though: we can think of plenty more reasons than just one to use GP...
  • Troubleshooting: Quick Fixes

    Everyone has their own troubleshooting quick checks; here are some that you may know well, and others you haven’t tried yet. Logon/Logoff Some policies applied only after the second logon, not after the first logon. What’s the deal? Anything...
  • Get GPO Backup with Powershell

    Jeff Hicks, one of Microsoft’s Powershell MVPs, has written a great script for managing GPO backups : The GroupPolicy module from Microsoft offers a great deal of functionality from a command line. In terms of regular maintenance or administration it...
  • Group Policy Videos

    We've got two new videos for you! The TechNet guys dropped by to ask Lilia some questions (always a good idea, in my opinion), and in return she dropped some knowledge. http://edge.technet.com/Media/Group-Policy-Search-with-Lilia/ - Did you know...
  • RSAT & GP Cmdlets

    This post was written by Judith, a technical writer for Group Policy. This will be the first post in a series on ways to use Powershell with Group Policy I wanted to play around with the Group Policy cmdlets. These are installed on Windows Server 2008...
  • How long does this script / WMI Filter take?

    I was reading GP MVP Darren Mar-Elia’s forum about WMI Filters and discovered a sweet PowerShell trick from another awesome friend of the GP team, Thorbjörn Sjövold (CTO of Specops Software ) You can use the PowerShell cmdlet “measure...
  • Group Policy & Scripting

    Hey, Scripting Guy! has a great series of posts around Group Policy & scripting: Using group policy cmdlets for backup and restore Test AD replication with group policy cmdlets How to compare 2 GPOs offline ( Part II )
  • More on searching group policy

    Here’s a quick follow-up to our last post on the existence of GPO search . One of our MVPs, Alan, has a great post up about a Group Policy Search webapp (Previously mentioned on this blog ). It includes instructions on how to install a Windows Search...
  • Windows Server “8” Settings Spreadsheet

    The latest Group Policy settings reference spreadsheet that covers the available administrative template settings and security settings for Windows Server “8” Beta, Windows 8 Consumer Preview and all earlier versions of Windows is now available in the...
  • Cross post: AskDS Group Policy Search Settings in the cloud

    Kapil posted a great article about a new tool created by Stephanus Schulte and Jean-Pierre Regente. It's an Azure-hosted tool that keyword searches Group Policy settings. Read about it here: http://blogs.technet.com/b/askds/archive/2010/06/24/announcing...
  • Re-post: Darren Mar-Elia's "Controlling Shares on Windows Systems"

    Darren Mar-Elia, aka GPOGuy, wrote a cool post about using Group Policy Preferences to remove unwanted network shares from your environment. Group Policy Preferences can do everything! If you've got Windows Server 2008 or above, you've already got GP...
  • Passwords in Group Policy Preferences

    Have you ever wanted to configure a preference item to include a specific user name and password? You can do so in several types of preference items, but you should first consider the security ramifications of embedding a user name and password in a preference...
  • Where Is “Logon Using Dial-Up Connections” in Windows Vista?

    I was thinking about my next blog entry a few weeks back. My research took me through various Web sites, message threads, and articles. Naturally, I wanted something not only pertinent to Group Policy, but also exciting and new (to quote the Love Boat...
  • Check a setting in all GPO's (Security, ADMX, and more)

    You configured a setting in one GPO and want to know what that setting is across all GPO’s. You want to check that a setting is not being overwritten by another GPO in the same domain (without checking through every settings report). Sound...
  • Setting Default Registry Key Values using Custom ADM Files (Part 1 of 2)

    I’d like to give a big shout out to Sean Gallinetti for providing the custom ADM example files. One use of creating and setting the default value of a registry key is creating the list of blocked and allowed cookies to configure the per site privacy...
  • Why didn't my Group Policy settings apply?

    Here’s a brief summary of everything you need to know about the way Group Policy applies, care of Florian, the always helpful Group Policy MVP. Florian Frommherz is a systems engineer from Germany working in Switzerland. Specialized in Windows environments...