Group Policy Blog

Performing a Denial of Service on AD–How Hard Is it Really?

I was motivated to write this post based on a vendor blog that I read recently, that talked about ways to maliciously perform what amounted to a denial of service attack on AD. Ostensibly the post was designed to sell software, which I don’t begrudge, but it got me thinking–how easy is this to do, … Read More.

Protecting Active Directory–Making AD and Group Policy Less “Visible” to Attackers

A couple of weeks ago, I gave a webinar for Semperis, on the topic of protecting AD from attackers. I presented 5 tips on the things you can do within your AD and Windows environments, to protect against “information exposure” that might allow an attacker to find paths of higher privilege within your AD environments. … Read More.

Azure AD Domain Services

Darren Mar-Elia was kind enough to take some time to walk through and share his thoughts on the Azure AD Domain Services. Microsoft recently released a preview and Darren jumped right in there picking it apart and helping us make sense out of the new capabilities. Take a look and hear his insight into expectations … Read More.

A Peek Inside Registry.pol

Hello everyone! I posted a quick video on polviewer.exe. The tool called ‘Registry.pol Reader’ is a free tool Darren Mar-Elia built to solve a pretty important issue. And because┬áhe’s a great guy, there is that! The need for the tool is pretty obvious to those of us who have been managing and troubleshooting Group Policy … Read More.

Spiceworld 2015 – Austin, TX!

Hi everyone! I hope you are well and you all had a great summer. I have to admit I’m torn, not quite enough Summer for me (or my kids) but I’m extremely excited to get back into a rhythm and get cranking on some great work this year. We have an amazing year planned at … Read More.

Are We Moving Towards a “Post-AD” World?

Over the past year, I’ve had occasion to work with some large enterprises that are pushing the envelope in terms of what the next generation of client computing will look like. In the process of this work, I’ve come to recognize what I think will be an inevitable trend. Namely, that on-premise Active Directory will … Read More.

GPO Exporter Demonstration [Video]

In this video, Darren Mar-Elia, SDM Software’s CTO and Founder, demonstrates the SDM Software GPO Exporter product, a tool that quickly and easily document your Group Policy Environment.

GPO Compare Demonstration

In this video, Darren Mar-Elia, SDM Software’s CTO and Founder, demonstrates the SDM Software GPO Compare product, a tool for being able to perform actions such as comparing group policy objects across your Windows enterprise network and creating reports about GPOs. GPO Compare greatly improves the manageability of group policy.

4th Edition of O’Reilly Active Directory Book is out!

Just a quick note to let everyone know that the 4th edition of the Active Directory Book from O’Reilly is out, courtesy of AD MVP Brian Desmond. For those of you who aren’t familiar with this book, its an invaluable resource for Active Directory Administrators, and Brian has added his considerable AD expertise to this latest update, … Read More.

PowerShell Script to leverage AD Tombstone cmdlets

Well, Active Directory MVP and well-known speaker Guido Grillenmeier from HP has taken my AD tombstone reanimation cmdlets and fashioned a very cool PowerShell script that uses the cmdlets and the new AD snapshot mounting feature in Server 2008 to not only restore deleted objects but also restore their attributes that are lost when the … Read More.