by Darren Mar-Elia | Jul 20, 2026 | Event Logs, General Stuff, Group Policy, Group Policy Management, Security Policy
Years ago, if you wanted to configure Windows Event Logs for things like maximum log size or retention behavior, you typically did that in Security Settings. Starting with Windows 8, Microsoft added a new Administrative Template that added new Administrative Template...
by Darren Mar-Elia | Jul 10, 2018 | Security Policy
With this post and my last post, I guess I’m on a path of finding interesting ways to “break” AD. The last post related to AD denial of service and this one relates to an interesting way to get to privileged access on AD by gaining what would seem to...
by Darren Mar-Elia | Jun 22, 2017 | Security Policy, Uncategorized
Delegation–A Blessing or a Curse? I’ve been wanting to sit down and write this blog post about AD information exposure for a couple of weeks now, and am finally finding the time to do so. For those of you who follow my blog, you know that I posted nearly a...
by Darren Mar-Elia | Feb 15, 2017 | Security Policy
With RSA Conference going on this week here in San Francisco, I thought it was timely to talk about Group Policy’s role in securing your Windows environment. Many of you are undoubtedly using Group Policy to deliver security settings, based on industry-standard...
by Darren Mar-Elia | Sep 8, 2015 | AD, Desired State Configuration, GP Troubleshooting, GPMC, Group Policy, PowerShell, sdm software, Security Policy
Hi everyone! I hope you are well and you all had a great summer. I have to admit I’m torn, not quite enough Summer for me (or my kids) but I’m extremely excited to get back into a rhythm and get cranking on some great work this year. We have an amazing...
by Darren Mar-Elia | Sep 19, 2012 | Group Policy, Group Policy Tools, registry policy, Security Policy, Tips & Tricks
A recent thread on Mark Minasi’s forum site reminded me of a topic that comes up every once in a while–namely, how do you cleanly remove Group Policy settings from a machine that has been removed from an AD domain. The answer is to avoid the problem in the...
