Group Policy Blog

Group Policy Tips, Tricks, and News from Darren Mar-Elia

Deploying Desired State Configuration through Group Policy

Adding a DSC script to a GPO

For those of you who read my blog, you’ll know that I am a big fan of the Desired State Configuration feature Microsoft introduced in PowerShell v4. For more information, you can see my early walkthrough of DSC and a comparison of Group Policy vs. DSC. And while I think DSC adoption is still pretty “early-days”, I do think this technology presents a lot of important capabilities for the future of…

SDM Software Group Policy Products Now Available to Government GSA Customers

SDM Software Group Policy products now available to GSA customers

We just wanted to make a quick announcement for our US government customers that SDM Software is now an approved GSA contractor, and all of our products are available via GSA Schedule. That includes our powerful Group Policy products such as GPO Compare, GPO Exporter (and the combined GPO Reporting Pak), GP Automation Engine and GP Auditing & Attestation.  You can get mor…

Group Policy Auditing & Attestation 1.1

Group Policy attestation options in GPAA 1.1

Hope everyone is having a great Summer (or Winter for you Southern Hemisphere folks)! We have been busy here at SDM, hence the lack of recent blog posts on my part. But I did want to drop a quick post to talk about our recent release of an incremental update to our Group Policy Change Auditing & Attestation product (GPAA). The 1.1 release shipped a couple of weeks ago, and provides a few new…

Group Policy Attestation Explained

Group Policy Attestation Explained

One of the cool features available in our Group Policy Auditing & Attestation (GPAA) product is the ability to perform attestation on Group Policy Objects (GPOs). In the video below, I spend some time discussing what GPO attestation is all about–the ability to assign ownership to GPOs in your environment, so that you can keep track of the responsible party for Group Policy Objects as they…

Delegate Group Policy Update in Windows 8.x

RSOP Logging Permisison in GPMC

When Microsoft shipped Windows 8 & Windows Server 2012, they added a new feature in GPMC, that allows you to perform remote Group Policy Updates on OUs of computers. I covered this feature in my previous roundup of Windows 8.1 Group Policy features. This feature is shown in the figure below:

As I was exploring this feature, I got to wondering how you might delegate the rights to…

Finding Group Policy Differences Between OUs

A frequent scenario that we come across here at SDM Software, are customers looking for help in discovering Group Policy differences between OUs. Namely, they may have a Marketing OU and a Sales OU that have GPOs linked to them, and they’d like to know how those are different (or the same) in terms of the Group Policy settings that are delivered to computers or users. The good news is that our…

Group Policy Preferences Passwords Bite the Dust!

Warning Using GP Preferences Passwords

For those of you following this issue, which I blogged about previously, you’ll know that several areas within Group Policy Preferences allowed for defining of passwords that were stored with the GPO settings storage in SYSVOL. These passwords were stored using an encryption method that was published publically by Microsoft (and had been for several years). In addition, the fact that t…

Using Group Policy & PowerShell to Mitigate Recent Internet Explorer Vulnerability

Configuring Active Scripting in IE using GP Preferences

Over this last weekend, Microsoft published warnings of yet another zero-day “memory corruption” Internet Explorer vulnerability to all versions of the venerable browser . Since there is no current patch for this yet, IT administrators are left to mitigate against it using a variety of less than ideal workarounds, which are documented here. If you scan this article, you will notice that many of…

Ready to Share your Feedback on Group Policy?

Love it or hate it, Group Policy has been a fixture of Windows configuration management for over a decade. As someone who has been intimately involved in both its past and its future, I have had the same mixed relationship with both Group Policy and Microsoft. Here at SDM Software, we make our living by helping you get more from Group Policy. But occasionally we peek up from behind our code and…

Anything New in Group Policy for Windows 8.1 Update One?

New Group Policy settings in Windows 8.1 Update 1

Last week, Microsoft shipped to MSDN subscribers, the bits for the first update to Windows 8.1. Regular users of 8.1 will get the update starting today, through Windows Update. A natural question would be, did Microsoft make any outwardly visible improvements or changes to Group Policy in this new release? The answer is, surprisingly (or not surprisingly :-)) little seems to have changed. A…

Copyright ©2013 SDM Software, Inc.
Site design by Social Media Ninjas | Sitemap