Security Filtering, WMI Filtering, and Item-level Targeting in Group Policy Preferences

Hi, I’m Florian, one of the Group Policy MVPs . You may know us MVPs from conferences, seminars, books, Newsgroups and Forums where we voluntarily provide help and guidance to Group Policy and its associated products. Today, I’d like to write about a feature in Group Policy Preferences you could find useful. Guidance tells us…


Check a setting in all GPO’s continued (scripts, firewall, GP Preferences and more)

 I mentioned this in the last post, here are some more examples.  To download the script, check the ‘Attachments’ link by clicking on this post’s title and then scrolling to the bottom. Quick refresher:   This script’s usage is as follows:   SearchGPOsForSetting.ps1 [–IsComputerConfiguration] <Boolean> [-Extension] <String> [-Where] <String> [-Is] <String> [[-Return] <String>] [[-DomainName] <String>]…


Group Policy Preferences Not Applying on Some Clients: Client-Side Extension, XMLLite

Group Policy Preferences quick tip: To ensure that preferences are applied to clients, make sure that clients have the CSEs and XMLLite installed If you’re like us, you’re seriously excited about Group Policy Preferences. You’re excited because you can’t wait to save yourself scripting time, and to use the rich administration UI and item-level targeting…


Search GPO : How to find a Group Policy Object

It’s interesting what you can discover when you right-click on something. For example, in the Group Policy Management Console (the GPMC) you can right-click on a domain and select “Search”, and a this amazing tool presents itself. This handy search tool is available with Windows Server 2003+ (if you have the GPMC, you have Search)….


Group Policy Troubleshooting – helpful Event log categories

As many of you know Group Policy troubleshooting can be a bit of a challenge. If you have not made use of the Group Policy operational logs that were introduced in Windows Vista, you are missing out on an extremely handy troubleshooting tool. On any Vista or newer system, open the event viewer (eventvwr from…


Group Policy Preferences: Deploy Printer Settings

We received an email from Daniel today. He’s done a great blog post on how to use Group Policy Preferences to deploy printer settings to workstations. I’m sure Lilia is with me on this though: we can think of plenty more reasons than just one to use GP Preferences 🙂 The pain of manual configuration…


Do I need to update my server to support new policies? When do I need to separate policies?

I just blogged about this very question over on my blog. Essentially the question we hear a lot is do I need to update Schema/Active Directory/Servers/functional modes etc to support a new client OS version. I wont revisit that Sometimes theres a need to separate policies for specific OS functions but not to “update” them….


Troubleshooting: Quick Fixes

  Everyone has their own troubleshooting quick checks; here are some that you may know well, and others you haven’t tried yet.   Logon/Logoff    Some policies applied only after the second logon, not after the first logon. What’s the deal?  Anything that is set to run synchronously won’t run until after the second logon….


AGPM 3.0 doesnt preserve all the Deny ACEs

We had a great customer question today on AGPM 3.0 that would probably interest quite a few of you using AGPM.   “…A customer imports some GPOs [into AGPM] in order to change control them. Some of the GPOs have Deny permission for particular users’ that have administrative rights or similar. After changing the GPOs with…