Group Policy Blog

Getting Started with Group Policy Automation Engine

PowerShell has increased in popularity quite a bit over the past few years. I recall my initial reaction to Jeffrey Snover’s ‘Monad Manifesto‘ that was published back in 2002 or so. It was quite revolutionary. Over the years it has been exciting to see it take form. The learning curve elicits different emotions in different … Read More.

Group Policy Compliance Manager 1.5 – Getting Started

Getting Started It is great to have this update to Group Policy Compliance Manager. Some great features to provide for management at scale, some nice refinements and fixes. Overall the system is running great and the ability to get up and running is quick and seamless. An updated setup routine walks through the process to … Read More.

Fun with the Group Policy Automation Engine and Out-GridView

Fans of PowerShell We are all fans right? We have been for a while. PowerShell is one of those things that the more you learn, the more you explore, the more you play, the more you appreciate what it has to offer. Some very simple things can prove to be very exciting. Out-GridView for example. … Read More.

Dealing With The AccountExpires Date in Active Directory – With PowerShell

By┬ánow most of us are aware that Active Directory dates are not the easiest bits of data to deal with. Wrapping our heads around how AD stores and deals with dates is very interesting on an intellectual level, and equally infuriating on a productivity level. Accessing this data from PowerShell is a useful technique to … Read More.

Analyze GPO Impact – Part II – Export-SDMGPSettings

Part II of our GPO Impact Analysis. For the purpose of this post the primary capability of Export-SDMGPSettings is to grab a ‘snapshot’ of all of the settings managed in a set of GPOs. Export-SDMGPSettings is one of the core cmdlets that make up the PowerShell part of the GPO Reporting Pak (GPRP). The syntax … Read More.

Analyze GPO Impact – Part 1

One of the many┬áscenarios that organizations contend with is impact analysis. For SDM Software this is about configuration and most importantly security configuration. For example, what happens if you go into Active Directory Users and Computers and move Server1 from its home in OU1 to a new home in OU5? Do you know? Does it … Read More.

Find and Delete All Empty GPOs – GP Reporting Pak

Find and Delete All Empty GPOs The SDM Software GPO Reporting Pak is full of nifty features and is simple to use. There are many common scenarios that organizations require. The PowerShell components of the product are sometimes overlooked. From discussions with people who are using the product there are common reasons for this. New … Read More.

MS16-072 – GP Permissions and an overview

Hello Group Policy fans enthusiasts happy people! Darren and I had a quick discussion about his script to remediate the problems created by applying MS16-072 and GP processing. Read Darren’s previous post for context but here is a recording of our discussion. Have a good day and happy troubleshooting! Kevin

GP Automation – Folder Options/Open With

OK, so this is not a ‘new’ story but it is an interesting one. Since the first script kitties were writing viruses that did nefarious things we had ways to ensure we could limit their impact. Redirecting .vbs to notepad was super common. I saw a tweet today from one of the PS-OGs (PowerShell Original … Read More.

Group Policy Automation and Dell Authentication Services

As you may have heard last week, or seen in our newsletter, or read graffiti’d all over the New York subway system, our Group Policy Automation Engine (GPAE) has added support to help organizations manage their Unix systems with Group Policy! OK, maybe that is a stretch, but it was in our newsletter! We are … Read More.