Group Policy Blog

ADMX Files for Windows 10 Build 1703 “Creators Update” Now Available

Now that the Windows 10 “Creators Update” is available, Microsoft has made the ADMX files for this new Windows 10 release available for download. As I mentioned in my last blog post, you can no longer guarantee that new ADMX files are backward compatible with the previous versions. So, how do you try out these … Read More.

Managing ADMX Files in a Windows 10 World

Microsoft has recently put out several articles¬†explaining some of the nuances of ADMX files in the new world of Windows-as-a-Service–where new Windows builds come out frequently and often ship with new versions of ADMX templates. I’ve blogged previously¬†about the role of ADMX–how is essentially builds the UI that you see under Administrative Templates policy within … Read More.

Find and Delete All Empty GPOs – GP Reporting Pak

Find and Delete All Empty GPOs The SDM Software GPO Reporting Pak is full of nifty features and is simple to use. There are many common scenarios that organizations require. The PowerShell components of the product are sometimes overlooked. From discussions with people who are using the product there are common reasons for this. New … Read More.

Modifying Default GPO Permissions at Creation Time

Now that we are all digging out from MS16-072, and the reality that it likely won’t be “fixed” anytime soon, I think it’s worthwhile to drop a quick blog post about how you can ensure that all GPOs that get created going forward in your environment, get the proper read permissions on them. A long … Read More.

Find all Registry Settings Managed in a GPO

Group Policy Objects (GPOs) can contain many different kinds of settings. Much of that data is simple registry data. Finding registry settings in GPOs and handling them is not the simplest of tasks and requires some PowerShell. Microsoft has provided some cmdlets for the management of Group Policy and at SDM Software we have provided … Read More.

Move Azure VM from One Subnet to Another

I was needing to test something on an unpatched 2008 R2 box and in my Azure lab the subnet that machine was pointed to was all full up! So, how to fix it? Of course PowerShell to the rescue. I wrote up a quick walkthrough of what I did to move the machine. Check it … Read More.

Troubleshooting GP Processing tip

Troubleshooting is a bit of an art form. It requires creativity but that creativity needs to be expressed inside certain parameters. Those parameters depend on what is being troubleshot. (Is that really a word?) There is a TechNet article that has been around for quite a while called Troubleshooting Group Policy Using Event Logs and … Read More.

Group Policy Preferences in the Local GPO? Yes!

If you caught the webinar last week that Kevin Sullivan and I presented, you might have caught the “secret tip” I presented at the end of the show (you can catch the whole webinar recording here). In there, I promised to more fully document this tip, so I’m doing that to let everyone experience the … Read More.

Understanding the Role of ADMX (and ADM) Files in Group Policy

Recently I’ve been answering a few questions about the role of ADMX files (Administrative Templates) in Group Policy. For those who are new to Group Policy or haven’t spent a lot of time with it, I have seen some misunderstanding around what these template files actually do, and their role in GP processing. So I … Read More.

Group Policy Loopback Everywhere?

Just the other day I was talking to a customer about Group Policy loopback. If you’ll recall, loopback is that feature in Group Policy processing that allows you to override a user’s *normal* user policy settings when they log into specific machines–such as kiosks or Remote Desktop Services/Citix XenApp servers or VDI systems, where it’s … Read More.