Blog

Got Group Policy Questions or Problems? Join me for a Q&A

Posted by:

Just a quick reminder to let folks know that I’ll be on the Talk Technet Episode tomrrow (Mar-30) morning at 9am (GMT-8) to take questions on Group Policy. Hope you can join me! Register here:

https://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?EventID=1032477762&EventCategory=4&culture=en-US&CountryCode=US

Thanks

Darren

3


About the Author:

Darren Mar-Elia is CTO & Founder of SDM Software, Inc. Darren has over 25 years of IT and Software experience in the Microsoft technology area, including serving as a Director in Infrastructure at Charles Schwab, CTO of Windows Management Solutions at Quest Software, and Sr. Director of Product Engineering at DesktopStandard. He has been a Microsoft MVP in Group Policy technology for the last 6 years and has written and spoken on Active Directory, Group Policy and PowerShell topics frequently over the years. He maintains the popular Group Policy resource web site at www.gpoguy.com and has been a contributing editor for Windows IT Pro Magazine since 1997. He has written and contributed to twelve books on Windows. Darren also speaks frequently at conferences on Windows infrastructure topics.

Discussion

  1. John Goldin  April 19, 2011

    I attended the AADUG meeting the other night and enjoyed your presentation. I am trying one of your suggestions using Set-GPPermissions. Here is what I did.

    Set-GPPermissions -Name “empty” -PermissionLevel None -TargetName “Authenticated Users” -TargetType “Group” -Replace

    I got an error stating:
    Set-GPPermissions : There is no such object on the server

    Next I did:
    Get-GPPermissions -Name “empty” -All
    I got information about the permissions set on the “empty” gpo and Authenticated Users was on the list.

    Trustee: Authenticated Users
    TrusteeType: WellKnownGroup
    Premission: GPOApply
    Inherited: False

    Do I have a syntax error some where?

    Thanks for your help,
    John Goldin

    (reply)
  2. Mike  April 25, 2011

    I’m attempting to setup a GPO and apply it to a pc on our domain. We’re running Server 2003 in a XP environment. I basically want to lockdown the pc to all users expect Admin’s. I’ve been able to apply GPO to user accounts but I want to only affect the pc that users logon to. I can’t seem to get that to work. Your help would be appreciated.

    (reply)
  3. Michael Kerrick  April 28, 2011

    I’m hoping you can straighten out a little confusion we are having. I have read and been told that installing SP3 on XP and SP2 on Server 2003 R2 installs the necessary structures to allow them to process Group Preferences. But some of our testing, and other documentation I have read, implies this is not true.

    I haven’t setup a full blown test yet, but I thought I would get a little guidance from you before I invest alot of time on this.

    Thank you,

    Michael

    (reply)

Add a Comment