Where SMART Group Policy Admins come to get SMARTER

A service of PolicyPak Software. Making you (even more) awesome!

RECEIVE REGULAR TIPS AND
BREAKING GROUP POLICY NEWS.
SIGN UP FOR OUR NEWSLETTER!

Nov
14
2016

ADMX Changes thru the years

I love it when I learn new stuff about Group Policy; or when someone shows me stuff I did know in a unique way. This is one of those. Microsoft has a great blog entry and corresponding spreadsheet to demonstrate “What settings were added or subtracted in ADMX thru the years”? Absolutely fascinating: https://blogs.technet.microsoft.com/grouppolicy/2016/10/12/admx-version-history/ The only time to really “worry” is when Group Policy ADMX settings are DELETED by the product team. Typically: This isn’t done. But it CAN happen; and if it does, you can set-GPregistryvalue Powershell item to help negotiate those rare cases. (I go over this in […]

Oct
4
2016

Next Group Policy Training: Atlanta. (And some security stuff that scared my pants off !)

Next GP Class Stop: Atlanta. (And some security stuff that scared my pants off !) Hey Team.. ! Just got back from Atlanta… where last week I was at Ignite. Quick Ignite report: Nothing blew my face off, but it was nice to physically be back in touch with friends, customers and students. The human connection CANNOT be underrated ! Check this picture out of a dinner on Wednesday night. Can you name all the people in this photo: http://screencast.com/t/daL5kTOFfU ? And, guess what? I’m coming back to Atlanta… TWICE MORE this year. First: Techstravaganza 2016 Nov 18th ! — […]

Aug
30
2016

Use Non-Microsoft DNS with Active Directory

Here’s an interesting article. Mostly because I wrote it, and also.. it is interesting. 🙂 It answers the question of “Can I use non-Microsoft DNS with my Active Directory (and why you might want to.)” Check it out. http://www.esecurityplanet.com/network-security/must-you-use-microsofts-in-box-dns.html

Aug
5
2016

Windows 10 Build 1607 (Anniversary Edition) – Group Policy

So.. “Windows 13” is out.. I mean… “Windows 10, Build 1607 Anniversary Edition” of course. And, it’s a pretty big update. To make your life easier I rounded up all the news about Group Policy and this build into one place. THIS PLACE. Here we go ! Item #1: Get the latest ADMX download https://www.microsoft.com/en-us/download/details.aspx?id=53430 Item #2: What to do with this ADMX download (video I made back in the day) https://www.youtube.com/watch?v=Q4DBdQo4XZs Item #3: Some Policy Setting items are ONLY in the Enterprise/Edu editions and NOT in Pro. Here’s that list so you don’t punch a wall, wondering why a […]

Jun
16
2016

Never a dull moment with Group Policy (or what to do about MS16-072)

So on Patch Tuesday, Microsoft released a patch to prevent a theoretical “man in the middle attack” when  GPOs are downloaded from your servers to your endpoints. Okay.. Fine. Sounds good. In fact, here’s the tech note on the problem. Fix for GP elevation https://technet.microsoft.com/library/security/ms16-072 But when that patch is applied, there is a “double increase” in security, one with an unintended consequence. That consequence is that SOME GPOs will no longer apply when you expected them to. You could call this a “breaking change”, but.. stick with me, I think Microsoft wanted this behavior updated. And it’s not TERRIBLE; it’s […]