Browse By Tags

Related Content
  • Blog Post: Forensics: Audit Group Policy Links and Changes with PowerShell

    Honorary Scripting Guy I would like to thank Ed and Teresa Wilson, the Microsoft Scripting Guy and the Scripting Wife, for bestowing upon me the title of Honorary Scripting Guy . This was a humbling surprise. It has been a joy to share my scripting passion with the community, and I will continue to...
  • Blog Post: How to move whole OU subtree bringing GPO and GPO link from source forest to destination forest

    During a Forest and Domain consolidation project I had a challenge to migrate users e computers between Forests. I had the need to maintain the same GPO and the same structure of OU . I dug the net and could not find anything that I could meet , I had to assemble various scripts , but even so I...
  • Blog Post: グループ ポリシーを使用してリムーバブル デバイスのアクセスを制御する方法

    いつも弊社製品をご利用いただきまして誠にありがとうございます。 Windowsプラットフォーム サポートの加藤です。 昨今、情報漏えい対策の一環として多くのお問い合わせをいただいておりますグループ ポリシーを使用してリムーバブル デバイスを制御する方法についてご紹介させていただきます。 グループ ポリシーを使用してリムーバブル デバイスを制御する方法は大きく分けると以下の 2 点の方法がございます。 - グループ ポリシーを使用してリムーバブル デバイスのアクセスを制御する方法 本項ではこちらの方法についてご紹介させていただきます。 - グループ ポリシーを使用してリムーバブル デバイスのインストールを制御する方法...
  • Blog Post: グループ ポリシーを使用してリムーバブル デバイス アクセス制御を行う前に行っていただきたいこと

    いつも弊社製品をご利用いただきまして誠にありがとうございます。 Windows プラットフォーム サポートの加藤です。 本項では、グループ ポリシーを用いてリムーバブル デバイスへのアクセス制御を行う際にご注意いただきたい点についてご紹介させていただきます。 ポリシーを適用して制御を行う前にご注意いただけますことを推奨しておりますが、ポリシーを用いてリムーバブル デバイスへのアクセス制御を既に行っているお客様につきましても、 “意図した制御が行えていない場合の対処策” もしくは “不具合に対する予防措置” としてご利用いただくことをお奨めしております...
  • Blog Post: How to use a GPO to delegate Windows Services Administration to a non-admin on SharePoint servers.

    On a SharePoint computer you will need to add the Feature – Group Policy Management. You will need to perform this on a SharePoint server as the services you need to configure for delegation must be on the server you are creating the GPO on. Note this requires elevated rights and is typically...
  • Blog Post: GPO Migration with PowerShell – Now including WMI filters

    TechMentor Redmond 2014 This week I am presenting a session on GPO migration at TechMentor Redmond 2014. This is an expanded version of the session I gave at the PowerShell Summit back in April. I received feedback in April that WMI filters must be supported before this would be considered a viable...
  • Blog Post: Three Steps to Migrate Group Policy Between Active Directory Domains or Forests Using PowerShell

    Three Steps Ahead Have you ever wished that you had three legs? Imagine how much faster you could run. Today we are going to look at three steps to migrating GPOs between domains or forests with PowerShell. Now that is fast! The Problem Have you ever wanted to copy all of your production Group...
  • Blog Post: App-V 5: Be Careful Toggling Shared Content Store Mode

    One of my colleagues in support let me know of an important note for those upgrading to App-V 5.0 Service Pack 2 Hotfix 4. It appears that the value for Shared Content Store (registry value SharedContentStoreMode in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AppV\Client\Streaming or the same option using...
  • Blog Post: Remote Group Policy Update - 'Under the Bonnet'

    Windows Server 2012 introduced the ability to perform remote Group Policy updates, kicked-off from the Group Policy Management Console or via the Invoke-GPUpdate PowerShell cmdlet. So... what happens when you schedule a remote Group Policy update? Before I start, the first thing to mention is that...
  • Blog Post: One-Liner: Specific GPO and DC Information from a Forest

    Man, I love PowerShell one-liners. The efficiency, the elegance, the challenge! Here's one to give me a list of the domain names in a forest, the number of group policies per domain and the number of domain controllers per domain. ( Get-ADForest ) . Domains | ForEach-Object { "Domain...
  • Blog Post: Comprehensive GPO Backup Script

    Obtaining a comprehensive, automated backup of your domain Group Policy Objects has always been a challenge. First, we had the GPMC WSFs (Windows Script Files) and then the glory of PowerShell and the Backup-GPO cmdlet. However, like a single chunk of chocolate, they were never quite enough... so...
  • Blog Post: App-V 5: On Roaming Exclusions

    When you use App-V with roaming profiles or a service or product that may roam integration settings of virtual applications, it was historically assumed by App-V that once a package’s extension points are laid down (or integrated,) roaming user profiles will carry it alongside the user’s...
  • Blog Post: “It’s Simple!” – Do the move! Go to DFSR!

    Hi there! I have noticed the following at many customers who had upgraded their Active Directory from Windows 2000/2003 to 2008 and plus: they do not (or forget to) upgrade Sysvol from FRS to DFSR! Several Technet articles covered the steps to do for Sysvol migration, so there is no need to go...
  • Blog Post: How to prevent the creation of GPOs from outside AGPM (Advanced Group Policy Management)

    During my interactions with Premier Microsoft customers I have found out that the main reason for not using AGPM (Advanced Group Policy Management) in order to enforce change control procedures on Group Policy management is the lack of information on how to prevent GPOs from being created or edited outside...
  • Blog Post: What’s New in Group Policy - Windows Server 2012

    In this post we will discuss some of the new features in Group Policy in Windows Server 2012 / Windows 8. Many changes and enhancements have been introduced in Group Policies such as, enhanced Group Policy Reporting, reducing service utilization, remote refresh of group policies, new starter GPOs...
  • Blog Post: Enterprise Management of ActiveX Controls using ActiveX Installer Service

    The ActiveX Installer Service (AXIS) is a Windows technology that enables the installation of ActiveX controls to a standard user in the enterprise. It consists of a Windows service, a Group Policy administrative template, and a few changes in Internet Explorer behavior. Many organizations must install...
  • Blog Post: Windows Server 2012 and Group Policy

    I've always been a great fan of Group Policy Objects.  They are a fantastic way to retain control of your environment.  With Windows Server 2012 the good things keep coming.  Today we will look at some of what’s new in Group Policy in Windows Server 2012. more specifically we will discuss...
  • Blog Post: To be synchrone or not to be ?!

    Bonjour! Dans cet article, nous évoquerons le fonctionnement des GPO et plus précisément la fonctionnalité Fast logon Optimization. Deux notions importantes concernant les GPO sont : o   Le mode d’application des GPO o   Le type de refresh des GPO Nous allons nous concentrer sur la...
  • Blog Post: Must have (User Experience Virtualization) Deployment and Management Resources!

    It was no coincidence that the inaugural release of Microsoft User Experience Virtualization (UE-V) directly coincided with the release of APP-V 5.0 For most modern enterprise user scenarios (BYOD, flexible workspace, mobile computing, etc.) the need to have portable applications that roam user settings...
  • Blog Post: Windows 8: Associate a file Type or protocol with a specific app using GPO (e.g:default mail client for MailTo protocol)

    For my first post I have chosen a topic that I have seen lots of “buzz” out there but no clear information on how to implement it in win8 Its common knowledge that You can associate a file type or protocol with a specific program/app using the default programs < Control Panel\Programs...
  • Blog Post: Group Policy client side extensions

    A couple of months ago I was assisting a customer with a very strange Group Policy problem. The first sign of the problem was when some users complained that they weren’t notified of upcoming password expiries. My initial thought was that it could probably be that the Default Domain Policy was...
  • Blog Post: Set Windows 8 Lock Screen Image (KB2770917)

    Microsoft have recently released a Windows 8 and Server 2012 cumulative update KB2770917. http://support.microsoft.com/kb/2770917 One of the important features of this update is the ability to customize the Windows 8 lock screen with corporate branding and set this across your domain joined computers...
  • Blog Post: Windows 8 and Windows 8.1 New Group Policy Settings

    Windows 8 RTM For full details, download the following file   Policy Setting Name       Allow all trusted apps to install     Allow deployment operations in special profiles     Block launching desktop apps associated with a file.     Block launching...
  • Blog Post: How to manage the First Run screens that appear when Microsoft Office 2013 applications are first launched

    Overview Microsoft Office 2013 shows the following screens when an application is launched for the first time: More Information Both the Office Customization Tool (OCT) and Group Policy Management Editor provide a way to disable these First Run screens Office Customization Tool...
  • Blog Post: How to manage the Start screen for all Microsoft Office 2013 applications

    Overview Unlike earlier versions of Microsoft Office, the Microsoft Office 2013 applications, when started, show a Start screen similar to the following, rather than opening the default blank template: More Information You can use the Office Customization Tool (OCT) or the Group Policy Management...