Posted in Setting of the Week

Group Policy Setting of the Week 16 – Prevent Roaming Profile changes from propagating to the server

This setting is another profile related setting however I think the focus is warranted as so many organisations use roaming profiles. This setting is called “Prevent Roaming Profile changes from propagating to the server” and can be found under  Computer Configuration > Policies > Administrative Templates > System > User Profiles and like the previous setting work on Windows XP…

Continue Reading...
Posted in Best Practice Tutorials

How to use Group Policy to configure home page settings – Part 1

One of the most common setting that Group Policy is used for it so configure browser home pages settings. There are a number of ways that this can be done in Part 1 i am going to go thought the changing the Home Page setting using a native Group Policy. In Part 2 I will explain how to configure home…

Continue Reading...
Posted in Setting of the Week

Group Policy Setting of the Week 15 – Add the Administrator security group to roaming users profiles

This week I have decided to chose “Add the Administrator security group to roaming users profiles” as the setting of the week. This setting can be found under “Computer Configuration > Policies > Administrative Templates > System > User Profiles” and applied to Windows XP / 2003 or later. This setting adds the administrator ACL to the users roaming profile…

Continue Reading...
Posted in Best Practice Tutorials

How to use Group Policy to disable USB drives on Windows XP

In my previous article “How to use Group Policy to make USB drives read only on Windows XP” I showed you you could configure Windows XP to prevent users from writing to USB block level devices. However for some organisations just making drives read only is not enough I have heard stories of them having to resort to using hot…

Continue Reading...
Posted in Tutorials

How to use Group Policy to Enabled/Disable Outlook 2010 Social Connector (a.k.a. People Pane)

There is an awesome new feature coming in Outlook 2010 call the Outlook Social Connector (a.k.a. People Pane) that allows you to view all the recent relevant status updates and emails from that person. This feature also enables third parties (i.e. Facebook, Twitter & Linkedin) to make connectors so that the view can contain information from a variety of sources….

Continue Reading...
Posted in Setting of the Week

Group Policy Setting of the Week 14 – Prevent access to registry editing tools

This weeks setting is another is another oldie but a goodie that is commonly used to lock down SOE’s so that users can use the registry editor. It is called “Prevent access to registry editing tools” which us a user setting found under User Configuration > Policies > Administrative Template > System and will work on all platforms since Windows…

Continue Reading...
Posted in Best Practice Tutorials

How to use Group Policy to make USB drives read only on Windows XP

One of the great new features with Windows 7 was Bitlocker to Go that enabled IT Administrators to ensure that all data written to USB drives is encrypted. In conjunction with this new feature Microsoft also added another option called “Deny write access to removable drives not protected by BitLocker” which allowed user to still read the files off USB…

Continue Reading...
Posted in Other Site Links

Loopback Policy Processing Debug Series – Replace Mode | CB5 Blog

Now all three post’s by Rich Crandall showing in great detail the modes of Group Policy Loopback. Loopback Policy Processing Debug Series – Normal Mode Loopback Policy Processing Debug Series – Merge Mode Loopback Policy Processing Debug Series – Replace Mode

Continue Reading...