GPO

Remove Orphaned ADMX GPO values

Remove Orphaned ADMX GPO values

A downside with the ADMX files is that when you update them, and the new files replace settings and values you end up with orphaned settings in your GPOs. In our example we had two orphaned registry values from a previous OneDrive ADMX.

read more
Microsoft Windows OS Versions

Microsoft Windows OS Versions

I recently ran into a GPO problem. My customer wanted to delegate different group policy settings on clients within a specific OU.
The OU contained numerous versions of Windows and all versions had different, OS version specific, settings.

read more
SASL/LDAP Simple warning on Domain Controllers

SASL/LDAP Simple warning on Domain Controllers

I noticed that a couple of Domain Controllers started reporting Warning-messages. It turns out that one or more clients have been using LDAP binds that are performed on a clear text (non-SSL/TLS-encrypted) connection.

read more
Disable Hardware Acceleration in Outlook 2013

Disable Hardware Acceleration in Outlook 2013

Not all computers work better with hardware acceleration, especially those with incompatible drivers.

A couple of users contacted me asking about “white screens” and freezes in Outlook 2013. The simple solution is to disable the hardware acceleration…

read more
Modifying permissions via Group Policy

Modifying permissions via Group Policy

A customer of ours had problems with an installation.
We started troubleshooting and noticed that the installation did not run in Elevated Mode, but wanted to put files in a folder which by default it does not grant regular users the ability to add or modify files.

read more
AD Delegation: Default Permissions for GPOs

AD Delegation: Default Permissions for GPOs

When setting up Active Directory delegation, you want administrators to be able to maintain Group Policy without being a Domain Admin.

If you read TechNet, Microsoft tells you to use Group Policy Creator Owners. However CO does not have permissions to modify or edit any other group policy objects.

read more
SCCM Client Installation Error 53

SCCM Client Installation Error 53

If you’re having trouble deploying the SCCM client and you’re getting Error 53 you should verify that the Client Installation account is local administrator and that Remote administration is turned on.

read more
Windows 2008 wont use Trusted Sites

Windows 2008 wont use Trusted Sites

Today I ran into an issue with Internet Explorer on a Windows 2008 R2 server.
I have a GPO that pushes Local Intranet and Trusted sites but they would not be visible through the GUI in Internet Options.

read more