WHERE SMART GROUP POLICY ADMINS

COME TO GET SMARTER

Jul
28
2015

How to block a Windows 10 update using Group Policy and the Cloud (For Windows 7 and Windows 8.1)

I’ve been asked if there’s a Group Policy based way to squelch the messages to “Reserve your copy of Windows 10″ from normal users. The answer is YES, but it’s only REQUIRED for NON-DOMAIN JOINED MACHINES. This is the one-stop-shop for everything from Microsoft: https://support.microsoft.com/en-us/kb/3080351 There is another article from Microsoft which explains why Windows PRO machines might still get the pop-up, even if they ARE domain-joined and how to stop those machines from getting the upgrade. Okay. The final question though is: how do you get registry items over to your NON-DOMAIN JOINED machines if you don’t want to run […]

Jul
1
2015

Manage Windows 10 Start Screen Layout with Group Policy

In this video tip, I’ll show you how to manage the Windows 10 Start Screen Layout with Group Policy. The video is short, sweet and to the point. Video on how to manage Windows 10 Start Screen For more details on how to manage (everything from Windows 7 and onward).. come to my Live or Online GP Training class !  

Feb
25
2015

How To Enable UNC Hardened Access to Prevent JASBUG (MS15-011/KB3000483 & MS15-014/KB3004361)

I didn’t write this. But fellow GPanswers.com Team Member Charles Palmer did ! But, I did have the LEAD GUY at Microsoft (name withheld) check out this post and give it a once-over for accuracy. Got the THUMBS UP, so here’s the how-to. Thanks Charles and also Microsoft. — Microsoft released these two updates in Feb 2015. You can read more about them here: http://blogs.technet.com/b/srd/archive/2015/02/10/ms15-011-amp-ms15-014-hardening-group-policy.aspx with an additional FAQ here: http://blogs.technet.com/b/askpfeplat/archive/2015/02/23/guidance-on-deployment-of-ms15-011-and-ms15-014.aspx In addition to the two KB’s above, KB3004375 is installed at the same time as KB3000483 as they work together. KB3000483 also requires additional configuration in Group Policy. The […]

Feb
25
2015

JESBUG GP Vulnerability — Advice

Microsoft put the petal to the metal and put together a great Q&A about the “JESBUG” GP Vulnerability. To be clear, it’s NOT just a GP vulnerability, but really SMB (the thing that does “sharing”) on your servers.   The link to that FAQ is now at: http://blogs.technet.com/b/askpfeplat/archive/2015/02/23/guidance-on-deployment-of-ms15-011-and-ms15-014.aspx   For me, the #1 question I get is … “Where is the ADMX file they keep mentioning and how do I get it installed?” The answer is IN the FAQ. And if you need a refresher on how to update the Central Store, then the BASIC gist is here in this […]

Feb
6
2015

Group Policy Preferences: Powerful *AND* mysterious.

I think the reason that GPPreferences is both heralded and feared, is that … they are both POWERFUL but MYSTERIOUS. In my GP Training class we spend a WHOLE DAY and then some on the GPPrefs.. because.. of both of their POWER and their MYSTERY. I found these quickie introductory articles on the GPPrefs and thought I would share them. It’s a three part series.. and a quick read: http://windowsitpro.com/windows-server-2003-end-support/logon-scripts-group-policy-preferences-and-server-2003-migration-par http://windowsitpro.com/windows-server-2003-end-support/logon-scripts-group-policy-preferences-and-server-2003-end-life-part http://windowsitpro.com/windows-server-2003-end-support/logon-scripts-group-policy-preferences-and-server-2003-end-life-pa-0 Just to put a fine point on it: You’ve already paid for the power of the GPPrefs. But if you don’t know what they can do, or exactly […]

Copyright © GPanswers.com. All rights reserved. GPanswers.com is a service of PolicyPak Software