by Darren Mar-Elia | Sep 8, 2011 | General Stuff, Group Policy Management, Group Policy Preferences
I recently had a good conversation with a fellow Group Policy MVP about the difference between policies and preferences (i.e. Group Policy Preferences). He asserted that with preferences, the “user can work around the settings (generally.)”. This got me...
by Darren Mar-Elia | Mar 29, 2011 | General Stuff, Group Policy
Just a quick reminder to let folks know that I’ll be on the Talk Technet Episode tomrrow (Mar-30) morning at 9am (GMT-8) to take questions on Group Policy. Hope you can join me! Register here:...
by Darren Mar-Elia | Feb 4, 2011 | General Stuff, Group Policy
If you aren’t already following my twitter feed (@grouppolicyguy) then here’s a new reason to do so. I’m posting quick Group Policy “Tips of the Day” on Twitter, for as long as I can think of them :-). Check them out and let me know what...
by Darren Mar-Elia | Jan 29, 2011 | General Stuff, Group Policy
Someone asked me recently what I thought of using Deny ACEs on GPOs for security group filtering. First, a little background. As you probably know, you can control which users and computers will process a particular GPO by using security filtering on that GPO. The...
by Darren Mar-Elia | Nov 18, 2010 | General Stuff, Group Policy, PowerShell, Uncategorized
Someone recently asked about the best way to perform bulk GPO renames. Of course, there are probably many reasons why you would want to do this (e.g. moving to a standard naming convention, cleaning up mis-named GPOs, etc.) but for my money, there is one technology...
by Darren Mar-Elia | Oct 14, 2010 | General Stuff
I recently wrote a whitepaper for my friends over at Beyondtrust that talks about the challenges and choices of trying to get to what I call “Best Privilege” on Windows desktops. The idea here is that a secure Windows desktop is one in which the user is...
