This video describes the concept of “GPO Sprawl”, how it impacts you and how you can help clean up your Group Policy environment using GPO Exporter 1.5.
Continue Reading →MAY
This video describes the concept of “GPO Sprawl”, how it impacts you and how you can help clean up your Group Policy environment using GPO Exporter 1.5.
Continue Reading →While much is changing in Windows 8, the changes related to Group Policy are more modest. One of these modest changes is in the Resultant Set of Policy (RSoP) functionality, exposed through the Group Policy Results Wizard in GPMC. This wizard was always my first “go-to” tool when trying to troubleshoot GP Processing problems, and they’ve made it more useful in Windows 8.
The first thing you’ll notice is that the Summary tab on RSoP is completely different, as shown here:
The ...
Continue Reading →Just a quick note that I finally got around to updating our freeware Group Policy Health Cmdlet to add module support for PowerShell v2. Hopefully this makes the cmdlet more discoverable for those of you using it in PowerShell v2 (probably everybody!). The module name is SDM-GPOHealth, so after running the install, just open PowerShell v2 and type:
import-module SDM-GPOHealth and you’ll be good to go!
And for more info on using the Health cmdlet, check out my Continue Reading →
Posted by: Darren Mar-Elia
I’m proud to announce that today we released GPO Exporter 1.5. This new release represents a huge step up in the arsenal of tools for analyzing and optimizing Group Policy deployments. I can’t tell you how many IT folks come to me and ask how they can streamline and reduce the number of GPOs they have deployed. But the problem is hard, with the sheer number of settings ...
Continue Reading →One of the cool things I like about our Group Policy Automation Engine product is the scenarios that it’s open up by providing what is essentially an automation portal into GPOs. One of those key scenarios is the ability to automate additions and changes to Group Policy Preferences Drive Mappings, which is used by organizations large and small to map user drives at logon, and is largely replacing traditional ...
Continue Reading →One of the challenges of the GPMC’s reporting is that it is not easy to find GPOs that have had Deny ACEs (Access Control Entries) set on their delegation. Deny ACEs are typically used to deny a particular user, computer or group from applying a GPO. I always recommend that they’re used on an exception basis, for the very reason that they are hard to spot after the fact and can cause increased complexity in your Group Policy deployments. Deny ACEs don’t ...
Continue Reading →Today we released an updated version of our widely used GPO Compare product. The 2.5 release brings some cool new features and improvements over 2.0, including:
Posted by: Darren Mar-Elia
WMI Filters have been available as a mechanism for filtering the effects of Group Policy Objects (GPOs) since Server 2003 & XP shipped. They are a valuable tool in your Group Policy Management arsenal. As the name implies, WMI filters allow you to filter the effects of a GPO based on queries that execute against the WMI repository on a given client machine (server or workstation). A WMI filter needs to be expressed in terms of a WMI Query ...
Continue Reading →One of the cool things about our GPO Compare product is it’s support for PowerShell. The product ships with a PowerShell cmdlet called Compare-SDMGPO that lets you compare live and backed-up GPOs–just like the GUI. We can use this capability to automate the comparison of live GPOs to baseline backups. For example, let’s say you have a baseline template GPO backup from one of Microsoft’s best practices security guides and you want to know if your live GPOs ...
Continue Reading →