Location: Home Page

Ads

Ads

Skyscraper

Ads

Welcome to GPOGUY.COM

Welcome to GPOGUY.COM

Welcome to GPOGUY.COM (and SDM Software, our commercial Group Policy Solutions company) -- The Internet Source for Windows Group Policy Information and Utilities!

What is Windows Group Policy? Group Policy is the main configuration management technology available in Microsoft Windows. It leverages Active Directory and provides control over security configuration, desktop lockdown and software deployment, to name just a few things, in a Windows environment. Because of the power and complexity of Group Policy, many people find it daunting to use the technology to its fullest. That's why I created this site.

I have put together this site as a resource for all things Group Policy related--hopefully with more advanced information than you'll find elsewhere. I'll be adding more stuff as I can, including some cool scripts and Group Policy-related utilities that I and others are writing. Check out What's New below for the latest additions.

And while you're at it, check out our best-of-breed array of Group Policy Solutions, including our popular GPO Reporting PakView a video demo of the Reporting Pak products.

Finally, if you have questions about Group Policy, consider joining our GPTALK mailing list, which is over 1000 members strong and growing!

Thanks for stopping by.

Darren Mar-Elia (a.k.a. the "GPOGUY")

What's happening on GPTalk Mailing List

  • hboogz just posted 'Re: [gptalk] Folder Redirection x XenApp GPO Help'

    I found my problem. Citrix has a Profile Management product, which is installed onto the servers. Once i setup an directory exclusion list via GPO using their ADM template for My Documents & Documents, it worked like a charm. Harry. On Fri...

  • hboogz just posted 'Re: [gptalk] Folder Redirection x XenApp GPO Help'

    I'd have to publish a desktop, have the test user in question log into that desktop so i could run the RSOP from that users' desktop initiated from the Citrix Server. Running RSOP on the Citrix Servers will only pull the GPO assigned to their O...

  • DarraghOShaughnessy just posted 'RE: [gptalk] Folder Redirection x XenApp GPO Help'

    Run RSOP on the Citrix servers From: gptalk-owner@lists.gpoguy.com [mailto:gptalk-owner@lists.gpoguy.com] On Behalf Of Harry Singh Sent: 27 January 2012 16:32 To: gptalk Subject: [gptalk] Folder Redirection x XenApp GPO Help All - ...

  • hboogz just posted '[gptalk] Folder Redirection x XenApp GPO Help'

    All - I'm running a mix of Windows 2008 and Windows 2003 DC's. I've created an OU consisting of CTX/TS servers and have a GPO applied to this OU with minimal user settings (handling Office 2010 configs) and set the Loopback processing on this G...

  • cymba just posted 'RE: [gptalk] RequireLogonToChangePassword'

    Okay, Thanks for your help! John Glover | Systems Engineer Green Dot Corporation 605 E Huntington Drive- Suite 205| Monrovia| CA 91016 Office: 626.739.3938| email: jglover@greendotcorp.com From: gptalk-owner@lists.gpoguy.com [mailto:gpt...

  • jeromelcruz just posted 'RE: [gptalk] RequireLogonToChangePassword'

    I was actually asked this one a few days ago. TADA, it's no longer available as a choice. "User Must Log On in Order to Change Password" Option No Longer Exists http://support.microsoft.com/kb/255776 In practice, you have to be 'actively co...

  • zou just posted '[gptalk] outlook themes and stationary'

    Hello, does anyone have a way to remove (with Group Policy) outlook themes and stationary? Running AD 2008/Outlook 2010/Exchange 2003. Many Thanks, Aristotle Zoulas

  • Sas just posted 'Re: [gptalk] place file on user's desktop'

    you are right Darren . the same question i have posted on forum. and now i am able to place the file on users desktop. http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/02dc525d-fe7a-497a-b6ec-a2bff4df98ac/?prof=required t...

  • dmarelia just posted 'RE: [gptalk] RequireLogonToChangePassword'

    John- All the references I find to this setting indicate it is a Win2K related setting. I don't see it exposed anywhere in newer versions of GP, although I do see the value set to 0 in my Default Domain Policy. Frankly, I would not be surprised if i...

  • cymba just posted '[gptalk] RequireLogonToChangePassword'

    Hi, Does anyone know where I can find RequireLogonToChangePassword in group policy? Thanks in advance. Confidentiality Notice: The information contained in this email is confidential and is being transmitted to, and is intended sole...

Join in the fun by subscribing here

Announcements

Announcements

Syndicate  
A New Year's Greeting from GPOGUY and SDM Software Founder Darren Mar-Elia - Tuesday, January 03, 2012

Darren Mar-Elia talks about 2011 and looks forward to the new year for SDM Software and GPOGUY.COM

 read more ...
Update WMI Filter Test Utility Provides timings - Friday, July 08, 2011

Updated WMI Filter Test Utility now provides timing data that lets you determine if a given WMI filter will take too long to process.

 read more ...
Update to Registry Policy Viewer Utlility - Tuesday, December 21, 2010

Check out the latest update to the Registry Policy Viewer tool (version 1.2), which now includes export to CSV and copy-to-clipboard features!

 read more ...
New Blog entry on backing up and restoring the local GPO - Friday, July 23, 2010

Check out my new blog on a script that Microsoft provides for backing up and restoring the local GPO!

 
GPOGUY founder Darren Mar-Elia now twittering on Group Policy - Monday, November 02, 2009

GPOGUY.COM and SDMSoftware.com founder Darren Mar-Elia is now using Twitter to communicate useful tidbits related to Group Policy. You can find him at www.twitter.com/grouppolicyguy!

 

 read more ...
New GPO Version Powershell Cmdlets - Thursday, June 04, 2009

New Powershell cmdlets that let you retrieve GPO version information and "touch" GPO versions on a GPO.

 

 read more ...
SDM Software ships new GPO Compare Product - Friday, November 21, 2008

The commercial "wing" of GPOGUY.COM, SDM Software, has shipped a cool new product called GPO Compare. This product lets you graphically compare the differences between two GPOs and output those differences to reports. Check it out!

 read more ...
ADMX versions of Office 2003 ADM templates! - Monday, November 17, 2008

Fellow Group Policy MVP Alan Cutherberson, of SysProSoft, has gone through the trouble of converting the Office 2003 ADM files to the Vista/2008 ADMX version (presumably just for English!). Check them out at http://www.sysprosoft.com/adm_to_admx.shtml

 read more ...
WMI Filter Test Utility Updated! - Friday, November 07, 2008

We've updated the WMI Filter Test Utility to support WMI Filters that contain multiple WQL statements (queries). Check out the new version 1.0.3!

 

 read more ...
New Whitepaper: Group Policy Preferences Overview - Wednesday, September 03, 2008
Since enough people have asked, "What is Group Policy Preferences?", I put together a short whitepaper that goes through the feature, its requirements and what it does. Enjoy! read more ...
Picking up computer group membership changes without a reboot - Tuesday, August 26, 2008

If you're using GP-based security group filtering to control GP processing by computers, then you know that, normally, when you need to make a change to a computer's group membership, it must be rebooted to pick up that change. However, check out this blog posting I wrote recently for a way around this:

http://sdmsoftware.com/blog/2008/08/picking_up_computer_group_memb.html

 
The new Group Policy book is available - Wednesday, May 21, 2008

The new Group Policy book is out, published as part of the 7-book Microsoft Windows Server 2003 Resource Kit, 2nd edition and also available individually for sale!! The book, called the "Windows Group Policy Guide", can also be purchased as part of the complete Resource Kit.

 
New Group Policy Book Available! - Wednesday, May 21, 2008

I just wanted to let everyone know that Microsoft Press has released a new version of the popular "Goup Policy Guide" book that fellow GP MVP Derek Melber and I contributed to a couple of years ago. This time Derek took the project on himself and the result is a great companion for navigating the new features within Group Policy in Server 2008 and Vista! Everyone who is doing anything with Group Policy should have this book on their desk!

 
Microsoft released a nice paper describing how to use the new Group Policy features in Vista - Tuesday, May 20, 2008

Microsoft has released a nice paper describing how to use the new Group Policy features in Vista. There is a link to it here. It also includes an explanation of why logon scripts sometimes won't work in Vista and the workaround.

 
SDM Software ships the new Desktop Policy Manager - Wednesday, April 30, 2008

SDM Software ships the new Desktop Policy Manager product to simplify desktop configuration management using Group Policy!

 
New PowerShell version of RGPRefresh - Wednesday, April 30, 2008

New PowerShell version of RGPRefresh remote GP refresh utility now available on the SDM Software Freeware page

 
New PowerShell cmdlets for GPMC - Friday, November 09, 2007

New PowerShell cmdlets for GPMC now available on SDM Software Freeware Page

 
new-SDMgpo Powershell CmdLet Released! - Tuesday, July 03, 2007

New PowerShell cmdlet new-SDMgpo lets you use PowerShell to create new GPO!

 
New get-SDMgpo PowerShell cmdlet - Friday, March 30, 2007

New get-SDMgpo PowerShell cmdlet for retrieving GPO information from a domain.

 
Updated version of the Vista Central Store Creator Utility - Thursday, February 22, 2007

Updated version of the Vista Central Store Creator Utility that fixes a bug with SYSVOL shares that were redirected to volumes other than the default. Also, a new VBScript that lets you disable the local GPO on pre-Vista systems can be found on the Tools page.

 
New Vista Central Store Creator Utility released. - Friday, January 26, 2007

This simple tool provides a GUI for creating the Vista Central Store for ADMX and ADML file.  See more here.

 
Update to gpolog.adm - Thursday, January 25, 2007

I just did a quick update to gpolog.adm that adds the super-verbose option for userenv logging and also adds the ability to enable Software Restriction Policy logging.

 
Jorge de Almeida Pinto [MVP-DS] updated the event log ADM - Thursday, December 28, 2006

Jorge de Almeida Pinto [MVP-DS] (http://blogs.dirteam.com/blogs/jorge/default.aspx) updated my event log ADM to provide additional Group Policy control of R2 Server's DFS-R, Forwarded Events and Hardware Events logs.

 
SDM Software releases first product! - Monday, December 18, 2006

My new company, SDM Software, which makes Group Policy management products, released its first product today-- the GPHealth Reporter! -- which reports on the health of GP processing on a local or remote system.

 
MS Whitepaper Released: Group Policy features in Vista - Tuesday, December 12, 2006

Microsoft has released a nice paper describing how to use the new Group Policy features in Vista. I have a link to it here. It also includes an explanation of why logon scripts sometimes won't work in Vista and the workaround.

 
A new training video "Using Administrative Templates Policy" - Wednesday, November 22, 2006

Finally! A new training video--"Using Administrative Templates Policy", on the Training Page

 
Microsoft released a new free download to migrate custom ADM's to Vista's ADMX - Friday, November 17, 2006

Microsoft released a new free download that let's you migrate custom ADM files to Vista's new ADMX format. It also includes a free ADMX editor to create ADMXs from scratch. You can get it here.

 
GPSI Viewer has been updated - Sunday, November 05, 2006

The GPSI Viewer tool has been updated to include Date Created and Date Last Modified fields 

 
Prevent Users from getting IE7 via Windows Update - Thursday, November 02, 2006

Now that IE 7 is here, you can prevent your users from getting it automatically in a Windows Update download by using a Group Policy template provided by MS. Check out the IE 7 Blocker Toolkit for the ADM file required to do this. Keep in mind that the setting in this ADM is a "preference", not a policy, and therefore must be disabled rather than set to "Not Configured" when you're ready to deliver IE 7.

 
Port of gpolog.adm file to the new Vista ADMX format - Wednesday, September 27, 2006

Check out the port of my gpolog.adm file to the new Vista ADMX format on the gpolog Page

 
How Secure is Group Policy? Whitepaper - Friday, September 15, 2006

I've got a new whitepaper that I've written, entitled "How Secure is Group Policy?", that's on the DesktopStandard website at http://www.desktopstandard.com/whitepapers.aspx

 
Lots of tool updates! - Thursday, July 27, 2006

Lots of tool updates! I've updated both the PolViewer and SIViewer (now called GPSI Viewer) utilities with some requested features. I've also got a new tool call WMIFTest that lets you view, print out and validate WMI Filters against computers in your environment so that you can see ahead of time where they will evaluate true or false. Check it out on the Tools page!

 
New training video entitled, "Basic Group Policy Troubleshooting" - Thursday, July 20, 2006

New training video entitled, "Basic Group Policy Troubleshooting", on the Training page.

 
New training video entitled, "Understanding Domain Account Policy" - Friday, May 19, 2006

New training video entitled, "Understanding Domain Account Policy", on the Training page.

 
New version (1.6) of the rgprefresh utility - Thursday, May 18, 2006

New version (1.6) of the rgprefresh utility that adds additional options for suppressing reboots and logoffs during a refresh event, on the Tools page.

 
New version of Group Policy logging ADM file - Friday, May 05, 2006

New version of Group Policy logging ADM file that includes some GPMC logging is available on the Tools page!.

 
New version of rgprefresh utility - Tuesday, April 04, 2006

New version of rgprefresh utility is available on the Tools page!

 
The latest training video, #100.4 is up on the Training page! - Tuesday, March 21, 2006

The latest training video, #100.4 is up on the Training page! This wraps up the 3-part training series on GPMC. Next, I'll be diving into individual GP features.

 
Microsoft has released a number of new GP-related resources - Friday, January 13, 2006

Microsoft has released a number of new GP-related resources, including an FAQ, information on GP changes in Windows Vista and Longhorn server and information on the new ADMX template format coming in Vista. See the Resources page for links.

 
Check out the new Group Policy Training page - Friday, January 06, 2006

Check out the new Group Policy Training page, where I'm posting video training clips about all aspects of Group Policy! Check the ones I have out there now and let me know what you think!

 
New things going on today - Wednesday, December 21, 2005

Well, there's a couple new things going on today. The first is that like everyone else on the planet, I've started a blog. And as you can imagine, its related to Group Policy. The nice people at dirteam.com are hosting it so check it out and let me know what you think. Speaking of the blog, the most recent posting on the blog is about the Registry.pol file, which holds the registry-related policy settings within a GPO. Within that blog entry I talk about my newest utility--PolViewer--which you can download from the Tools page on this site.

 
Added new custom ADM template that lets you set event log size - Monday, December 12, 2005

Added new custom ADM template that lets you set event log size and retention methods for the AD, DNS and FRS logs on your AD Domain Controllers. These logs are not supported within the native event log settings under Computer Configuration\Windows Settings\Security Settings

 
Check out the FAQ page - Friday, October 21, 2005

Check out the FAQ page for an interesting new KB article that describes a hotfix that lets you ensure that the DC that handles requests for AD information is also the same one that handles requests for SYSVOL information. This solves the problem where a workstation might use one DC to get its list of GPOs to process and another DC to copy the settings from the GPTs for those GPOs.

 
Differences in ADM files between the new Server 2003, SP1 release and the ADMs provided with XP, SP2 - Thursday, April 14, 2005

I've created a page that shows a quick analysis of the differences in ADM files between the new Server 2003, SP1 release and the ADMs provided with XP, SP2. Check it out here.

 
Latest Free Video's

Latest Free Video's

Latest Free Tools

Latest Articles

Group Policy Preferences Overview Whitepaper by Darren
 This whitepaper provides an overview of the requirements for using the new Group Policy Preferences feature, and a quick overview of each new policy area within the product. Click on the Read Mo...
Understanding Group Policy Storage by Darren
Group Policy leverages a complex and sometimes inconsistent model when it comes to storing the settings that you specify within a Group Policy Object (GPO). This is probably owing to the fact that, wh...
Understanding Policy "Tattooing" by Darren
     You've probably heard of registry tattooing as it relates to NT 4 system policy. Tattooing was the effect that you saw whenever you applied a registry policy to a computer or ...
Deploying Software With Group Policy by Darren
Whitepaper describing how to use the Software Installation feature in Group Policy. (3rd party whitepaper--requires registration) Register Here
How secure is Group Policy? by Darren
Whitepaper describing the security of the Group Policy infrastructure itself (3rd party whitepaper--requires registration)

Latest Added / Updated FAQ's

Where can I get a list of ADMX files that Microsoft provides for it's products?

Read More

How do I know if a particular software restriction policy rule is applying or not, to a given application?

Read More

How does Windows determine when to apply the Standard Profile and When to apply the Domain Profile for Windows Firewall policy settings?

Read More

Is there a way to use ADM templates to populate registry values under the HKEY_USERS hive?

Read More

I've loaded some custom ADM files into my GPO but the GP editor tool doesn't seem to show them. I only see the container node on the left, but not the custom policy items on the right?

Read More
Banner Inv
Copyright 2009 by GPOGUY.COM
Terms Of Use