Any shortcut to check/uncheck "Link Enable" for multiple GPOs at one time?
I have 3 GPOs since the Cryptolocker virus that block all executables from the %Temp% folder. And of course it often blocks legitimate apps, like the Java update.I've found that I can uncheck the Link...
View Article"Trusted sites" option is disabled
domain Env: windows 2008 (FSMO), Windows 2003 Trying to create IE 8 policy from windows 2008 R2 DC and to add a trusted sites option is disabled. Pls. attached image. Am I doing something wrong?
View ArticleDoes the domain admin need a list of everyone's password?
I just started to work for a company where the policy is for the IT department to keep a list of every user's password. I know that this is a bad policy, but how do I explain that to my boss? The...
View ArticleIE 10 group policy preferences
I understand that with the introduction of IE 10, the maintenance section is gone for IE from group policies. My understanding is that now you should either change settings via IEAK or Group Policy...
View ArticleNext Level Document Security with Windows RMS
Your company’s sensitive information is its lifeblood, and the last thing you want is for it to be leaked. How areyou protecting your company's files from prying eyes? On June 17th, we'll be hosting a...
View Articlereset password users via active directory
i need to method to show users reset their password via active directory from external site, but i don't need third-party program.
View ArticleActive Directory and Powershell Helpful Info
A lot of times, here in the Active Directory & GPO group, we are asked how to perform a particular task with Active Directory. Responses will range from including/using one tool or another, but we...
View ArticleAD user login
I would just like to ask if there's some more configurations that I should apply in AD authentication. Because I am using AD accounts to log in but unfortunately, I can't log on. Thanks for your help
View ArticleCan't Prohibit Local Firewall Rules?
This is driving me nuts! I must be doing something wrong.In the "Strengthened Windows Firewall Security" (translation might be wrong) settings I open Properties, Domain Profile, Customize in Settings,...
View ArticleIE 10 audio player broken
We recently upgraded our staff's computers to IE 10, due to another software upgrade requiring it. After the upgrade, when our users try to play a dictation file off a website, they receive the error...
View ArticleCache computer accounts to RODC - How?
Hi All, We have a RODC (read only DC) in our branch office that I have setup to cache the passwords of the users in that office but it seems you also need to cache the computer accounts to allow them...
View ArticleActive Directory user/group cleanup
I'm in the process of cleaning up my AD users and groups and am looking for some basic advice. Most of the users/groups in question were system generated during a program install. What's the thought...
View ArticleCleanup old Certificate Authorities
I inherited a domain environment that needs a little cleanup. I have seen these errors for a while and i believe i am good to just remove the entries from PKIView.msc(manage AD Containers)We have 2...
View Articleactive directory user profile path problem
can anyone shed any light on this problem?our PDCe is running server 2008, (physical server) we have two 2012 servers running hyperV, on each of these we have a DC on a VM running server 2012r2:so 3...
View ArticleAD user password reset not replicating right away
I have notice int he last week that depending on which DC that I'm connected to. If I reset a users password. It doesn't replicate right away to the other DC like it's suppose to and I have to ether...
View ArticleI Want to bulk change UPN to firstname.lastname@domain
I had a tool/script that did this but have lost it - I want to change the UPN of all our users from username@domain to firstname.lastname@domain to match up the UPN with their email addresses.
View ArticleBest way to export GPO for auditors
I am looking for a way to export our gpo settings for auditors. We exported HTML and XML and they did not like either format. Anyone have suggestions. Sheri
View ArticleInternal Domain Names, Best Practices
Hello All,This summer we will be moving our internal domain over to a new name and wanted to ask for thoughts on best naming practices?The domain name we currently have is already used in three places,...
View ArticleNeed help with GPO to block .exe's in %appdata% folder
I am new to using GPO and need help in setting up a policy to block .exe's from running in the %appdata% folder. I am doing this to deny certain malware from being able to run most notably the...
View ArticleLogging Off Script Showing a Warning Message to Remote Users Before LoggOff
I have script that:VB.netOptionExplicitConstFLAG_FORCEDLOGOFF=4ConstFLAG_SHUTDOWN=1DimstrComputerstrComputer=InputBox("IP or Host Name","Remote Users LogOff -...
View Article