Posted in Setting of the Week

Group Policy Setting of the Week 17 – Background upload of a roaming user profile’s registry file while user is logged on

Another one…? yes… Another roaming profiles group policy for this weeks setting of the week. But this is a really super cool policy I found while reading the “What’s New in Folder Redirection and User Profiles” (via @stealthpuppy ) document that Microsoft recently published. This document mainly goes through the new features with folder redirections in Windows 7 however it…

Continue Reading...
Posted in Setting of the Week

Group Policy Setting of the Week 16 – Prevent Roaming Profile changes from propagating to the server

This setting is another profile related setting however I think the focus is warranted as so many organisations use roaming profiles. This setting is called “Prevent Roaming Profile changes from propagating to the server” and can be found under  Computer Configuration > Policies > Administrative Templates > System > User Profiles and like the previous setting work on Windows XP…

Continue Reading...
Posted in Setting of the Week

Group Policy Setting of the Week 15 – Add the Administrator security group to roaming users profiles

This week I have decided to chose “Add the Administrator security group to roaming users profiles” as the setting of the week. This setting can be found under “Computer Configuration > Policies > Administrative Templates > System > User Profiles” and applied to Windows XP / 2003 or later. This setting adds the administrator ACL to the users roaming profile…

Continue Reading...
Posted in Setting of the Week

Group Policy Setting of the Week 14 – Prevent access to registry editing tools

This weeks setting is another is another oldie but a goodie that is commonly used to lock down SOE’s so that users can use the registry editor. It is called “Prevent access to registry editing tools” which us a user setting found under User Configuration > Policies > Administrative Template > System and will work on all platforms since Windows…

Continue Reading...
Posted in Setting of the Week

Group Policy Setting of the Week 13 – Files

This week I have selected the Group Policy preference “Files” setting which can be found under either Users or Computers > Preferences > Windows Settings > Files. I commonly see the file update option used where a licence file or a single .exe application needs to be updated on all the computers in an organisation. Here a central copy of…

Continue Reading...
Posted in Setting of the Week

Group Policy setting(s) of the Week 12 – Prevent changing desktop background & Desktop Wallpaper

This weeks setting of the week is a double header but they are really simple but so commonly used that they really have to be mentioned. The first setting is found under User Configuration > Policies > Administrative Templates > Control Panel > Personalization > Prevent changing desktop background. As the name suggest this setting prevents users from changing the…

Continue Reading...
Posted in Security Setting of the Week

Group Policy Setting of the Week 11 – Prompt for password on resume from hibernate /suspend

The setting of the week this time highlights the one and ONLY power management policy that has been around since Windows 2000. The “Prompt for password on resume from hibernate / suspend” can be found under User Configuration > Administrative Templates > System > Power Management. Until Windows Vista came along this was the only power management setting that could…

Continue Reading...
Posted in Setting of the Week

Group Policy Setting of the Week 10 – Remove Default Programs link from the Start menu

This weeks group policy setting of the week is about the “Remove Default Programs link from the Start menu” option that can be found under User Configuration > Policies > Administrative Templates > Start Menu and Taskbar. The start menu entry “Default Programs” was was introduced as part of the United States v. Microsoft Antitrust settlement case back in the…

Continue Reading...