Group Policy Blog by Darren Mar-Elia (The “GPOGUY”)
Retrieving GPO Links with PowerShell
Sometimes I'm reminded that, even though Microsoft has been shipping their Group Policy PowerShell module for a while now, it is missing some key functionality. Fortunately, it took someone else asking me a question about how they could script something in PowerShell...
Visit me at TechEd North America
If you're going to be at TechEd North America next week, stop by and say hello. I'll be manning the Microsoft Windows 7 & MDOP booth on Tue morning and then presenting on Group Policy and VDI on Thursday afternoon. That session will cover some of the things you...
Got Group Policy Questions or Problems? Join me for a Q&A
Just a quick reminder to let folks know that I'll be on the Talk Technet Episode tomrrow (Mar-30) morning at 9am (GMT-8) to take questions on Group Policy. Hope you can join me! Register here:...
Getting Group Policy Counts with PowerShell
Sometimes you want to know how many GPOs you have in a domain. Powershell provides a way to do this quickly and easily. Earlier today I tweeted about the way to do this in Windows 7 or Server 2008-R2, using the Microsoft-provided "GroupPolicy" PowerShell Module. Its...
Group Policy Tip of the Day Tweets!
If you aren't already following my twitter feed (@grouppolicyguy) then here's a new reason to do so. I'm posting quick Group Policy "Tips of the Day" on Twitter, for as long as I can think of them :-). Check them out and let me know what you think! Darren
The Virtues and Vices of GPO Deny ACEs
Someone asked me recently what I thought of using Deny ACEs on GPOs for security group filtering. First, a little background. As you probably know, you can control which users and computers will process a particular GPO by using security filtering on that GPO. The...
iPads in the Enterprise—running Windows
Saw this site put up by Citrix today--www.ipadsatwork.com. I thought it was an interesting approach--pitching iPads in the enterprise by making the iPad a glorified dumb terminal, via the Citrix Receiver, for accessing your Windows desktop and apps. While I agree that...
Performing Bulk GPO Renames
Someone recently asked about the best way to perform bulk GPO renames. Of course, there are probably many reasons why you would want to do this (e.g. moving to a standard naming convention, cleaning up mis-named GPOs, etc.) but for my money, there is one technology...
Find Group Policy (GPO) Setting Conflicts using PowerShell
This is my 2nd blog post around using the PowerShell features in the two products of SDM Software's GPO Reporting Pak. In this post, I'll talk about the GPO Exporter product, which, as the name implies, lets you export Group Policy settings. The cool thing about the...
Get to “Best Privilege” on Windows Desktops
I recently wrote a whitepaper for my friends over at Beyondtrust that talks about the challenges and choices of trying to get to what I call "Best Privilege" on Windows desktops. The idea here is that a secure Windows desktop is one in which the user is not an...