A downside with the ADMX files is that when you update them, and the new files replace settings and values you end up with orphaned settings in your GPOs. In our example we had two orphaned registry values from a previous OneDrive ADMX.
GPO
Microsoft Windows OS Versions
I recently ran into a GPO problem. My customer wanted to delegate different group policy settings on clients within a specific OU.
The OU contained numerous versions of Windows and all versions had different, OS version specific, settings.
Get Active Directory pictures in Windows 10
We have been working on migrating a customer from Windows 7 over to Windows 10. Our goal is to have Windows 8 and 10 clients pull the pictures from Active Directory to the users local profiles.
SASL/LDAP Simple warning on Domain Controllers
I noticed that a couple of Domain Controllers started reporting Warning-messages. It turns out that one or more clients have been using LDAP binds that are performed on a clear text (non-SSL/TLS-encrypted) connection.
Disable Hardware Acceleration in Outlook 2013
Not all computers work better with hardware acceleration, especially those with incompatible drivers.
A couple of users contacted me asking about “white screens” and freezes in Outlook 2013. The simple solution is to disable the hardware acceleration…
GPO Templates for Windows 8.1 and 2012 R2
I know many IT folk have been waiting for the updated Administrative Templates for Update 1 to ensure a smooth rollout…
Modifying permissions via Group Policy
A customer of ours had problems with an installation.
We started troubleshooting and noticed that the installation did not run in Elevated Mode, but wanted to put files in a folder which by default it does not grant regular users the ability to add or modify files.
AD Delegation: Default Permissions for GPOs
When setting up Active Directory delegation, you want administrators to be able to maintain Group Policy without being a Domain Admin.
If you read TechNet, Microsoft tells you to use Group Policy Creator Owners. However CO does not have permissions to modify or edit any other group policy objects.
SCCM Client Installation Error 53
If you’re having trouble deploying the SCCM client and you’re getting Error 53 you should verify that the Client Installation account is local administrator and that Remote administration is turned on.
Windows 2008 wont use Trusted Sites
Today I ran into an issue with Internet Explorer on a Windows 2008 R2 server.
I have a GPO that pushes Local Intranet and Trusted sites but they would not be visible through the GUI in Internet Options.








