AGPM 3.0 doesnt preserve all the Deny ACEs

We had a great customer question today on AGPM 3.0 that would probably interest quite a few of you using AGPM.   “…A customer imports some GPOs [into AGPM] in order to change control them. Some of the GPOs have Deny permission for particular users’ that have administrative rights or similar. After changing the GPOs with…


Red / Green Underlining continued: Using Preferences to set IE settings like preference, or like policy

How to: use F5-F6-F7-F8 to control what settings you want pushed out, lock down the Advanced tab with a preference setting to act like policy   Last time I talked about how to use F5-F8 keys to use the glanularity that we love so much about Preferences.  Now, time for an example of using GP Preferences, then creating a…


Restoring Default Domain Policies and SYSVOL to their defaults

We have stated a number of times through a number of forums that its not a great practice to muck around with the Default Domain Policy and the Default Domain Controllers Policy. In fact its actually a really bad practice…same goes with the SYSVOL. Just dont screw around with it. We recommend if you want…


Red / Green: GP Preferences doesn’t work even though the policy applied and after gpupdate force

I set a Preference setting, but it didn’t work.  The answer? Probably F5-F6-F7-F8.   GP Preferences has a ton of compelling reasons to use it; the functionality allows admins to configure settings that are difficult to impossible to achieve through policy (deploying shortcuts, setting up drive maps, managing devices…) and the configuration UI is eerily…


PolicyMaker Preferences Migration tool

To keep you in the loop, many of you have asked whether we intend to provide support for PolicyMaker Preferences and migrate to Windows Server 2008’s Group Policy Preferences.   I can confirm we are currently testing a tool that will be able to perform this migration. We are pleased with the quality of the…


Drive Mappings in Logon Scripts not working correctly

Awhile ago we had a customer call come in. The customer had a major problem in Windows Server 2008. When they tried to map drives through a script it didnt work. The customer had initially applied a Login script as a start up script and then changed the GPO settings to a login script under User…