by Darren Mar-Elia | Jan 29, 2011 | General Stuff, Group Policy
Someone asked me recently what I thought of using Deny ACEs on GPOs for security group filtering. First, a little background. As you probably know, you can control which users and computers will process a particular GPO by using security filtering on that GPO. The...
by Darren Mar-Elia | Dec 8, 2010 | iPad, VDI
Saw this site put up by Citrix today–www.ipadsatwork.com. I thought it was an interesting approach–pitching iPads in the enterprise by making the iPad a glorified dumb terminal, via the Citrix Receiver, for accessing your Windows desktop and apps. While I...
by Darren Mar-Elia | Nov 18, 2010 | General Stuff, Group Policy, PowerShell, Uncategorized
Someone recently asked about the best way to perform bulk GPO renames. Of course, there are probably many reasons why you would want to do this (e.g. moving to a standard naming convention, cleaning up mis-named GPOs, etc.) but for my money, there is one technology...
by Darren Mar-Elia | Oct 22, 2010 | Cool New Products, Group Policy, Group Policy Preferences, PowerShell
This is my 2nd blog post around using the PowerShell features in the two products of SDM Software’s GPO Reporting Pak. In this post, I’ll talk about the GPO Exporter product, which, as the name implies, lets you export Group Policy settings. The cool thing...
by Darren Mar-Elia | Oct 14, 2010 | General Stuff
I recently wrote a whitepaper for my friends over at Beyondtrust that talks about the challenges and choices of trying to get to what I call “Best Privilege” on Windows desktops. The idea here is that a secure Windows desktop is one in which the user is...