Posted: April 1, 2017 | | Tags: Active Directory, ADMX, GPO, OneDrive, PowerShell
A downside with the ADMX files is that when you update them, and the new files replace settings and values you end up with orphaned settings in your GPOs. In our example we had two orphaned registry values from a previous OneDrive ADMX.
Updated: July 20, 2016 | | Tags: Code, Deployment, GPO, OS, Windows, WMI Filtering
I recently ran into a GPO problem. My customer wanted to delegate different group policy settings on clients within a specific OU.
The OU contained numerous versions of Windows and all versions had different, OS version specific, settings.
Updated: November 12, 2017 | | Tags: Active Directory, GPO, PowerShell, Profile, usertile, VBs, Windows 10
We have been working on migrating a customer from Windows 7 over to Windows 10. Our goal is to have Windows 8 and 10 clients pull the pictures from Active Directory to the users local profiles.
Updated: May 17, 2016 | | Tags: Active Directory, GPO, Security, Troubleshoot, Windows Server 2008, Windows Server 2012
I noticed that a couple of Domain Controllers started reporting Warning-messages. It turns out that one or more clients have been using LDAP binds that are performed on a clear text (non-SSL/TLS-encrypted) connection.
Updated: March 5, 2016 | | Tags: ADMX, Deployment, GPO, Office 2013, Outlook, Registry, Troubleshoot
Not all computers work better with hardware acceleration, especially those with incompatible drivers.
A couple of users contacted me asking about “white screens” and freezes in Outlook 2013. The simple solution is to disable the hardware acceleration…
Posted: July 10, 2014 | | Tags: Administrative Templates, Deployment, GPO, Patch, Release, Windows 8, Windows Server 2012
I know many IT folk have been waiting for the updated Administrative Templates for Update 1 to ensure a smooth rollout…
Posted: May 28, 2014 | | Tags: File and Storage Services, GPO, Permissions, Security
A customer of ours had problems with an installation.
We started troubleshooting and noticed that the installation did not run in Elevated Mode, but wanted to put files in a folder which by default it does not grant regular users the ability to add or modify files.
Updated: December 29, 2013 | | Tags: Active Directory, GPO, Permissions, Security, Windows Server 2008, Windows Server 2012
When setting up Active Directory delegation, you want administrators to be able to maintain Group Policy without being a Domain Admin.
If you read TechNet, Microsoft tells you to use Group Policy Creator Owners. However CO does not have permissions to modify or edit any other group policy objects.
Posted: November 30, 2012 | | Tags: Deployment, GPO, SCCM, System Center, Troubleshoot
If you’re having trouble deploying the SCCM client and you’re getting Error 53 you should verify that the Client Installation account is local administrator and that Remote administration is turned on.
Updated: December 29, 2013 | | Tags: Browser, GPO, Registry, Security, Troubleshoot, Windows Server 2008
Today I ran into an issue with Internet Explorer on a Windows 2008 R2 server.
I have a GPO that pushes Local Intranet and Trusted sites but they would not be visible through the GUI in Internet Options.