Group Policy Blog by Darren Mar-Elia (The “GPOGUY”)
How to Deploy Group Policy Preferences through Microsoft Intune?
82% of our customers are operating in a hybrid world for their configuration governance tasks, balancing between premises and one or multiple clouds. Group Policy has been around for 26 years, and still serves many customers well, especially for Windows Server...
Demystifying Loopback Processing in Group Policy
I still stumble across questions about Group Policy Loopback Processing on Reddit and other platforms. It confounds a lot of folks because what it does is a bit complex. In this blog, I am going to try to break it down so it is easy to digest. What is Loopback...
Evaluating OU Membership Using WMI Filters
I was reminded of a thread I read a while back where someone was trying to filter a domain-linked GPO by OU membership. The objective was to allow or block computers in a specific OU from receiving a domain-linked GPO purely by evaluating the OU to which they...
Windows Management History, Part 2: Automation Grows Up (2005–2011)
Check the beginning of the story here. By 2005, things were changing quickly. DesktopStandard was acquired by Microsoft, and I went from watching the future unfold from the outside to helping build it from the inside. Walking into Microsoft felt like stepping onto a...
Tattooing Windows with Microsoft Intune
Tattooing has been part of Windows configuration management for decades. In the Group Policy world, tattooing occurred when a policy wrote a value but didn’t remove it when the policy no longer applied. The result was familiar to anyone who has supported Windows...
Windows Management History, Part 1: When Monad Quietly Lit the Fuse
In the early 2000s, Windows administration was a patchwork of tools that never quite agreed with each other. MMC snap‑ins behaved like they were built by different teams on different planets. VBScript was powerful but brittle. Command‑line tools spoke in wildly...
How to Disable Group Policy Processing… on Purpose?
I have to say that after 25 years of messing around with Group Policy, I am constantly amazed by the new things I still learn about the technology and its behavior. Especially when those things are substantial and weird. Such was my recent experience when a colleague...
The Stryker Breach: A Wake-Up Call for Change Management, Privilege Management and Zero Trust
The recent cyberattack on the Stryker Corporation has created chaos through healthcare and cybersecurity sectors. Beginning on March 11, 2026, the incident disrupted global operations, manufacturing, and surgical schedules. This wasn't a standard ransomware play; it...
Understanding Group Policy “Tattooing”
If you’ve worked with Group Policy for any length of time, you’ve probably heard the term 'registry tattooing'. The concept dates back to NT 4.0 System Policies, for those Windows veterans who remember it. Tattooing occurred when a registry-based policy applied a...
Understanding Group Policy Storage and Structure
Group Policy uses a complex, at times inconsistent, model to store configured settings in a Group Policy Object (GPO). This stems from the historical development of Group Policy. While a central team at Microsoft built the Group Policy infrastructure, individual...