29/07/2010, 2:45 pm
This year I will be presenting 2 Group Policy session at TechEd Australia and TechEd New Zealand . I am super excited to be co-presenting these session with fellow Group Policy MVP Jeremy Moskowitz who has literally wrote the book on Group Policy.
You are of course going to be attending my session however if you want to see what other session are going to be presented the Australian Session Catalog has now got session listed (more coming soon).
This means you will have 20% of all the Group Policy MVP’s in the world at TechEd this year, so between us (mainly Jeremy) we will be able to answer any of your Group Policy questions.
See you there!!!
29/07/2010, 11:39 am
A new hotfix (KB2171141) is out from Microsoft that resolves an issues with the IE8 search provider when applying the “Prevent Internet Explore Search box from displaying” is enabled (see image below).
This policy will remove remove the search box from Internet Explorer (see image below).
But then when a user logs on to the computer for the first time they are prompted to setup their default IE setting and then they will get this error message (see image below).
It also looks like this hotfix is also probably not going to be in Windows 7 Service Pack 1 as it is not listed in the complete list of hotfixes.
To download the hotfix and to get more info visit Internet Explorer 8 restores the search provider settings when the “Prevent Internet Explorer Search box from displaying” Group Policy setting is enabled
29/07/2010, 11:01 am
Ned Pyle from the Active Directory Service team has just done a super post to the Ask the Directory Services Team called Post-Graduate AD Studies. This is a collection of links to pretty much every AD/Group Policy related TechNet article known to man. Definitely a post that you will want to bookmark to use as a reference whenever you have any AD or Group Policy related problems or questions.
Below is a list of all the Group Policy related articles that are listed in the post:
Check out the whole article at: Post-Graduate AD Studies – Ask the Directory Services Team – Site Home – TechNet Blogs.
P.S. Can anyone pick where I got the inspiration for the title?
27/07/2010, 7:00 pm
In my previous article In this article Best Practice:Active Directory Structure Guidelines – Part 1 I spoke about some of the guidelines I personally use when developing an Active Directory OU structure. In this next part I will discuss some guidelines I use when designing a Group Policy Object infrastructure.
Ideally you should make the the Active Directory OU and GPO design decision together to best ensure that you have the most efficient design possible. However if you have an existing OU structure designed a lot of these guidelines can still be applied to most existing environments.
As in Part 1 these are simply guidelines that I use and should not be taken as hard an fast rules. I quite often finding myself having to break these rules due to real world conflicts or just because one rule might conflict with the other rule. If you do find your self in a situation where you are not sure which path to take try to chose the option that will result in the least administrative effort in the long term.
Continue reading ‘Best Practice: Group Policy Design Guidelines – Part 2’ »
Tags:
Active Directory,
AD,
Advanced,
AGPM,
Design,
DFS-R,
Enforced,
GPMC,
GPO,
Group Policy,
Guidelines,
RSAT,
Secuirty Filtering,
SYSVOL,
WMI filtering Category:
Best Practice,
Tutorials |
22 Comments
26/07/2010, 9:10 pm
This weeks group policy setting on the week is one that most IT administrators will probably want to implement. Now for personal use the Windows logon sound is quite nice however when you have an office packed with computers it can sound like a symphony in the morning as everyone turns on their computer. This is a new policy setting for Windows Vista but during the Beta is was not something that could be turned off. Luckily Microsoft heard loud and clear that this was an option they needed to add and by the RTM they had added this option for end users and IT admin.
As I mentioned before this is a Windows Vista or greater setting which can be found under Computer Configuration > Policies > Administrative Templates > System > Logon.
