Posted in Setting of the Week

Group Policy Setting of the Week 17 – Background upload of a roaming user profile’s registry file while user is logged on

Another one…? yes… Another roaming profiles group policy for this weeks setting of the week. But this is a really super cool policy I found while reading the “What’s New in Folder Redirection and User Profiles” (via @stealthpuppy ) document that Microsoft recently published. This document mainly goes through the new features with folder redirections in Windows 7 however it…

Continue Reading...
Posted in Tutorials

Updated: How to download and install the Group Policy Management Console (GPMC)

One of the common task that Group Policy administrators need to do is download and install the Group Policy Management Console (GPMC) on their computer to allow them to make changes to Group Policy. This tool is by default not installed on Windows Server 2008 R2 or Windows 7. Below I first go through the Windows 7 and then the…

Continue Reading...
Posted in Setting of the Week

Group Policy Setting of the Week 16 – Prevent Roaming Profile changes from propagating to the server

This setting is another profile related setting however I think the focus is warranted as so many organisations use roaming profiles. This setting is called “Prevent Roaming Profile changes from propagating to the server” and can be found under  Computer Configuration > Policies > Administrative Templates > System > User Profiles and like the previous setting work on Windows XP…

Continue Reading...
Posted in Setting of the Week

Group Policy Setting of the Week 15 – Add the Administrator security group to roaming users profiles

This week I have decided to chose “Add the Administrator security group to roaming users profiles” as the setting of the week. This setting can be found under “Computer Configuration > Policies > Administrative Templates > System > User Profiles” and applied to Windows XP / 2003 or later. This setting adds the administrator ACL to the users roaming profile…

Continue Reading...
Posted in Setting of the Week

Group Policy Setting of the Week 14 – Prevent access to registry editing tools

This weeks setting is another is another oldie but a goodie that is commonly used to lock down SOE’s so that users can use the registry editor. It is called “Prevent access to registry editing tools” which us a user setting found under User Configuration > Policies > Administrative Template > System and will work on all platforms since Windows…

Continue Reading...
Posted in Setting of the Week

Group Policy Setting of the Week 13 – Files

This week I have selected the Group Policy preference “Files” setting which can be found under either Users or Computers > Preferences > Windows Settings > Files. I commonly see the file update option used where a licence file or a single .exe application needs to be updated on all the computers in an organisation. Here a central copy of…

Continue Reading...
Posted in Setting of the Week

Group Policy Setting of the Week 10 – Remove Default Programs link from the Start menu

This weeks group policy setting of the week is about the “Remove Default Programs link from the Start menu” option that can be found under User Configuration > Policies > Administrative Templates > Start Menu and Taskbar. The start menu entry “Default Programs” was was introduced as part of the United States v. Microsoft Antitrust settlement case back in the…

Continue Reading...
Posted in Setting of the Week

Group Policy Setting of the Week 9 – Allow Automatic Updates immediate installation

First of all thank you for coming to my new web site www.grouppolicy.biz this site is still rather new and if you have any issues and/or suggesting please feel free to post a comment. This weeks GPSW covers another product that I use a lot and love to talk about, Windows Server Update Services (a.k.a. WSUS). The “Allow Automatic Updates…

Continue Reading...