Saturday Mail Sack: Because it turns out, Friday night was alright for fighting edition

Hello all, Ned here again with our first mail sack in a couple months. I have enough content built up here that I actually created multiple posts, which means I can personally guarantee there will be another one next week. Unless there isn’t! Today we answer your questions around: Detecting virtual machines with WMI Filters… Read more

Group Policy Management Improvements in Windows Server "8" Beta

Hi all, Ned here again. If you’ve been supporting group policy for years, you’ve grown used to its behaviors. For something designed to manage an enterprise, its initial implementation wasn’t easy to manage itself. The Group Policy Management Console improved this greatly after Windows Server 2003, but there was room for enhancement. Windows Server “8”… Read more

Friday Mail Sack: Dang, This Year Went Fast Edition

Hi folks, Ned here again with your questions and comments. This week we talk: AD Garbage Collection behavior Applying Group Policy based on installed roles and features Apple hates .local domains More on auto site coverage from Lurch Fixing the mysteriously bad CPU performance of brand new servers DFSN and NetApp Hyper-V and AD/DFSR/FRS/etc. disk… Read more

Friday Mail Sack: Unintended Hilarity Edition

Hiya folks, Ned here again with another week’s questions, comments, and oddities. This time we’re talking: GPMC inconsistent permissions error ADMT multiple servers DFSR staging calculation performance USMT and MAX_PATH DFSR port 5722 on members Common AD support topics Other things Let’s get it. Question When we change security on our group policies using GPMC,… Read more

Forcing Domain Admins to use AGPM (but not really)

Hi folks, Sean Wright here for my final post. So, you have AGPM installed, but your Domain Admins continue using GPMC to create, delete, and modify Group Policy. You’ve asked nicely, but that hasn’t had much effect. Now you want to make your point, and prevent your Domain Admins from managing Group Policy the wrong… Read more

Restrictions for Unauthenticated RPC Clients: The group policy that punches your domain in the face

Hi folks, Ned here again. Around six years ago we released Service Pack 1 for Windows Server 2003. Like Windows XP SP2, it was a security-focused update. It was the first major server update since the Trustworthy Computing initiative began so there were things like a bootstrapping firewall, Data Execution Protection, and the Security Configuration… Read more

Installing GPMC on Windows Server 2008 and Windows Vista Service Pack 1

 Mike here again. For some time now, we’ve had inquiries about where the Group Policy Management Console (GPMC) is located in Windows Server 2008 or Windows Vista SP1. It’s well documented that Server 2008 includes GPMC but, it does not appear in the administrative tools. The Group Policy Management Console is included in Windows Server… Read more