Posted in Tutorials

How to configure IIS to support large AD Token with Group Policy

Active Directory Token Bloat is an issue in AD where user are is a member of too many security groups. As such their account exceed the default 12k token size limit in Windows that is set on their internal AD Security Token. This is a common problem for many large organisation that have many security groups and in most situation…

Continue Reading...
Posted in Tutorials

Customising Windows 8.1 Start Screen Layout with Group Policy

In the keynote presentation of TechEd North America 2013 a new Group Policy setting was demonstrated that showed how you can now configure the layout of the Windows 8.1 Start Screen. For your convenience I have summarised the list of steps shown in the demo so you can configure this option for yourself… when the beta is release…. on June…

Continue Reading...
Posted in ScreenCast Tutorials

How to enable boot to desktop group policy for Windows 8

So long ago I blogged/ranted about how the Group Policy setting “Do not show the Start Menu when the user logs in” was explicitly disabled in Windows 8 (see  The must NOT have Windows 8 Start Menu Group Policy Setting). But I have since found a way that you can actually implement this feature (all be it not perfectly) using…

Continue Reading...
Posted in Tutorials

How to Troubleshoot AppLocker

AppLocker is a great new feature that was introduced in Windows 7 that allowed IT Admins to prevent the running of certain application in their corporate environment (e.g. Chrome). However there are a number of steps and pre-requisites for this feature to work that seem to catch people up quite often. So below is a simple troubleshooting flow chart that…

Continue Reading...
Posted in Tutorials

VDI Group Policy Optimisation Template and Script

Continuing on with my last post about optimising VDI guest services based on the Optimizing Windows 8 for Virtual Desktop Infrastructure session at MSS I have now created a Group Policy Object that performs all the services, registry and other customisations that was mentioned in the session. So.. What I have done is taken Carl Luberti and Jeff Stokes Windows…

Continue Reading...
Posted in Tutorials

How to disable Java in IE using Group Policy

You may already be aware there is a pretty serious vulnerability with Java that has just been patched (see Security Alert for CVE-2013-0422 Released ) on pretty much all versions of the program. For some people however this may get them questioning if they need Java installed at all on their computers. Personally I have uninstalled Java off my friends and…

Continue Reading...
Posted in Tutorials

How to enable and configure Group Policy setting in Windows RT

Along with the recent release of Windows 8 Microsoft also released Windows RT which is pretty much Windows 8 designed to operate on ARM based processors. For consumers the most obvious difference of this OS is the lack of ability to run legacy software. In enterprises however the biggest missing feature is that this OS is not joinable to a…

Continue Reading...
Posted in Tutorials

How to use Group Policy to change the Default Lock Screen image in Windows 8

Microsoft recently release the November 2012 Cumulative Update for Windows 8/2012 that enables you to configure the default lock screen image for Windows 8 (See quote below). Enable enterprise customers to customize the default lock screen. You may have thought that this image was customisable by the users in the control panel already however this would only configure the image…

Continue Reading...