How to enable Group Policy Preferences Logging via the Local Group Policy Editor

When opening the local Group Policy Editor (gpedit.msc) you will notice that on a default Windows 7 SP1 Enterprise client there is no logging and tracing node for Group Policy Preferences logging underneath the Group Policy node. The reason for this is because Group Policy Preferences can only be managed within domain based Group Policy objects and therefore a Windows 7 SP1 client does not have the Group Policy Preferences related administrative template GroupPolicyPreferences.admx installed Read More …

How to partially remove the SkyDrive option in Office 2013 using Group Policy

If you have tried out the Office 2013 Preview you probably noticed the SkyDrive integration within the File Open and Save dialogs in Word, Excel and other Office Applications. Personally have started using SkyDrive all the time, but I can imagine that some companies rather do not want to see their users storing sensitive data on SkyDrive. So I wondered if this option could be disabled.     Well apparently there is a Group Policy Read More …

The Group Policy Setting “Verbose vs normal status messages” has a new name in Windows 8

If you want to show your users more details of what is going on during start, logon, logoff and shutdown of a system you can enable a Group Policy setting that is called “Verbose vs normal status messages’ in Windows 7 and earlier versions of Windows, but in Windows 8 the setting has a new name and is now called “Display highly detailed messages”. You can find the setting under Computer Configuration / Administrative Templates Read More …

GPO Template for UE-V SettingsTemplateCatalogPath configuration

To simplify my testing activities with Microsoft’s User Experience Virtualization (UE-V( Beta, I created a Group Policy template that configures the User’s SettingsTemplateCatalogPath. The SettingsTemplateCatalogPath is the location where UE-V looks for new or updated templates once a day. The SettingsTemplateCatalogPath setting is stored within the  Windows Registry under HKEY_CURRENT_USER\Software\Microsoft\UEV\Agent\Configuration To get the GPO working I had to create another “custom” registry value called GP_SettingsTemplateCatalogPath_Set which defines whether the setting is enabled or disabled. (Well Read More …

ToolTip: GPO Deny Finder

GPO Deny Finder is a FREE tool from sdmsoftware that helps you to find GPOs that have deny ACEs. The below video explains how to use the tool. More details about the tool can be found here or just download the tool directly from here

Skype Group Policy Settings

Just recently one of our customers requested the Skype (Business version) Application to be packaged for software distribution, so I wondered what the status is these days with regard to locking down Skype with Group Policy. Well the results are sobering. Despite the fact that Skype is part of Microsoft since a while, there has not been much progress in making Skype more Group Policy aware. The settings that can be configured using Group Policy Read More …

ReadTip: Group Policy Central Access Policies Extension Specification

If you are interested in Group Policy stuff, here’s a new Open Specifications Documentation for Group Policy: Central Access Policies Extension that appears to be something new coming with Windows 8. To be honest with you, I guess I need to read this doc a few more times, until I could really explain in detail what this is all about, Some other articles mentioning this are Exploring Windows Server 8: Dynamic Access Control and Windows Read More …

Windows 8 – New GPO stuff

I have just compared the C:\Windows\PolicyDefinitions folder on the Widows 8 preview build with a Windows 7 Enterprise build. And unless I missed one, the below ADMX/ADML files are new. AppxPackageManager.admx dam.admx DeviceCompat.admx EAIME.admx EarlyLaunchAM.admx EdgeUI.admx ExternalBoot.admx msched.admx ProximityCommon.admx srm-fci.admx UserState.admx WindowsHistoryVault.admx WinStoreUI.admx wlansvc.admx WPN.admx WPN.Provider.admx wwansvc.admx When you open the related ADML files stored under C:\Windows\PolicyDefinitions\en-US you will find some interesting hints about what these new policies are supposed to do. You will find Read More …

Group Policy Settings for Microsoft Lync 2010 Client

Just in case you missed this one, Microsoft released documentation and an ADM template for the Microsoft Lync 2010 client. The following settings can be configured. Specify transport and server Enable strict DNS naming for server name Configure SIP security mode Configure SIP compression mode Prevent users from running Microsoft Lync Allow storage of user passwords Require logon credentials Disable HTTP fallback for SIP connection Disable server version check Additional server versions supported Enable using Read More …

Taking Group Policy beyond what’s in the box – Part2

In my previous post I provided a brief overview of how PolicyPak can take you beyond default Group Policy management. In today’s post I am going to show you how easy it is to get PolicyPak up and running in your test environment. You can test PolicyPak on a local computer or within an Active Directory environment. Now beside the awesome things PolicyPak can do, what I really like about this solution is that it Read More …