Group Policy Blog

Registry Policy Viewer 1.5

Darren took the time to prove to us that even the greatest tools can be improved! Thank you for that. The Registry Policy Viewer that GPOGuy introduced years ago has continued to be a favorite. A few new features have been added and some really interesting usability updates will make this great tool even better. … Read More.

Analyze GPO Impact – Part 1

One of the many scenarios that organizations contend with is impact analysis. For SDM Software this is about configuration and most importantly security configuration. For example, what happens if you go into Active Directory Users and Computers and move Server1 from its home in OU1 to a new home in OU5? Do you know? Does it … Read More.

MS16-072 – GP Permissions and an overview

Hello Group Policy fans enthusiasts happy people! Darren and I had a quick discussion about his script to remediate the problems created by applying MS16-072 and GP processing. Read Darren’s previous post for context but here is a recording of our discussion. Have a good day and happy troubleshooting! Kevin

Darren’s 9 Group Policy Principles

Darren Mar-Elia and I spent some time this week with a group of consultants and service providers. These folks come from a wide variety of backgrounds and experiences. Our goal was to talk about Group Policy, some best practices, and share some of our experiences of a combined almost 50 years of working with Group … Read More.

GPO Reporting Pak – Find-DupGPSettings

Following a bit of a theme here. I did some exploring on scenarios related to using the GPO Reporting Pak PowerShell cmdlets to automate some GP troubleshooting. This video talks about searching through the output of your report inside the PowerShell pipeline. This allows you to let your imagination go and come up with some … Read More.

Find all Registry Settings Managed in a GPO

Group Policy Objects (GPOs) can contain many different kinds of settings. Much of that data is simple registry data. Finding registry settings in GPOs and handling them is not the simplest of tasks and requires some PowerShell. Microsoft has provided some cmdlets for the management of Group Policy and at SDM Software we have provided … Read More.

Group Policy to Desired State Configuration

Group Policy has been a bit of a comfort for many of us for the past 15 years. It is a technology that is full of promise and capability. It is sufficiently complex, and incredibly powerful. As PowerShell has evolved to embrace configuration with Desired State Configuration we need to keep, update ourselves, and stay … Read More.

Troubleshooting GP Processing tip

Troubleshooting is a bit of an art form. It requires creativity but that creativity needs to be expressed inside certain parameters. Those parameters depend on what is being troubleshot. (Is that really a word?) There is a TechNet article that has been around for quite a while called Troubleshooting Group Policy Using Event Logs and … Read More.

Spiceworld 2015 – Austin, TX!

Hi everyone! I hope you are well and you all had a great summer. I have to admit I’m torn, not quite enough Summer for me (or my kids) but I’m extremely excited to get back into a rhythm and get cranking on some great work this year. We have an amazing year planned at … Read More.

Ghosts in the GPO Machine–Local Security Policy Changes on DCs

What would you say if I told that it was possible to accidentally write changes up to domain-based GPOs by simply making local security policy changes on your Domain Controllers? I was emailed recently by a fellow techie, who was seeing some odd behavior at a site that he worked at. What was happening is that they … Read More.