Category

Group Policy

GPO Compare Demonstration

In this video, Darren Mar-Elia, SDM Software’s CTO and Founder, demonstrates the SDM Software GPO Compare product, a tool for being able to perform actions such as comparing group policy objects across your Windows enterprise network and creating reports about GPOs. GPO Compare greatly improves the manageability of grou…

WMI Filter Test Utility Updated to Include timings

Just a quick note before the weekend starts to let folks know I updated the GPOGUY.COM WMI Filter Test Utility to include timing information (see below).
Specifically, this lets you see how long a given WMI filter took to evaluate on the target system, so you can see roughly how long it will take to evaluate during GP Processing. This means that now you can not only test your WMI filters against…

Re-ordering Group Policy Client Side Extensions

Recently a fellow Group Policy MVP asked about whether it was possible to control the order of Client-Side Extension (CSE) processing in Group Policy. The CSEs are the DLLs that do the real work of policy processing in GP. They reside on all Windows client machines and each policy area (e.g. software installation, folder redirection, security, admin templates, all the various Group Policy…

Retrieving GPO Links with PowerShell

Sometimes I’m reminded that, even though Microsoft has been shipping their Group Policy PowerShell module for a while now, it is missing some key functionality. Fortunately, it took someone else asking me a question about how they could script something in PowerShell to realize that our SDM GPMC cmdlets, which have been around since about 2008, have a pretty good set of functionality even in t…

Visit me at TechEd North America

If you’re going to be at TechEd North America next week, stop by and say hello. I’ll be manning the Microsoft Windows 7 & MDOP booth on Tue morning and then presenting on Group Policy and VDI on Thursday afternoon. That session will cover some of the things you can do with Group Policy to optimize VDI deployments as well as things to avoid when using GP to manage VDI-based desktops. Hope to…

Got Group Policy Questions or Problems? Join me for a Q&A

Just a quick reminder to let folks know that I’ll be on the Talk Technet Episode tomrrow (Mar-30) morning at 9am (GMT-8) to take questions on Group Policy. Hope you can join me! Register…

Getting Group Policy Counts with PowerShell

Sometimes you want to know how many GPOs you have in a domain. Powershell provides a way to do this quickly and easily. Earlier today I tweeted about the way to do this in Windows 7 or Server 2008-R2, using the Microsoft-provided “GroupPolicy” PowerShell Module. Its as simple as:
(Get-GPO -All).Count
However, if you are not yet on these newer OS versions, you can still get this information from…

Group Policy Tip of the Day Tweets!

If you aren’t already following my twitter feed (@grouppolicyguy) then here’s a new reason to do so. I’m posting quick Group Policy “Tips of the Day” on Twitter, for as long as I can think of them :-) . Check them out and let me know what you…

The Virtues and Vices of GPO Deny ACEs

image

Someone asked me recently what I thought of using Deny ACEs on GPOs for security group filtering. First, a little background.

As you probably know, you can control which users and computers will process a particular GPO by using security filtering on that GPO. The GPMC exposes this through the “security filtering” dialog on the Scope pane of a particular GPO, as shown below:

By default,…

Performing Bulk GPO Renames

Someone recently asked about the best way to perform bulk GPO renames. Of course, there are probably many reasons why you would want to do this (e.g. moving to a standard naming convention, cleaning up mis-named GPOs, etc.) but for my money, there is one technology that makes this easy–PowerShell!

There are (at least) two ways to do this in PowerShell, depending upon which version of Windows…

Copyright ©2013 SDM Software, Inc.
Designed by Santa Rosa Website Designer Social Media Ninjas | Sitemap