Location: Home Page

Ads

Ads

Skyscraper

Ads

Welcome to GPOGUY.COM

Welcome to GPOGUY.COM

Welcome to GPOGUY.COM (and SDM Software, our commercial Group Policy Solutions company) -- The Internet Source for Windows Group Policy Information and Utilities!

What is Windows Group Policy? Group Policy is the main configuration management technology available in Microsoft Windows. It leverages Active Directory and provides control over security configuration, desktop lockdown and software deployment, to name just a few things, in a Windows environment. Because of the power and complexity of Group Policy, many people find it daunting to use the technology to its fullest. That's why I created this site.

I have put together this site as a resource for all things Group Policy related--hopefully with more advanced information than you'll find elsewhere. I'll be adding more stuff as I can, including some cool scripts and Group Policy-related utilities that I and others are writing. Check out What's New below for the latest additions.

And while you're at it, check out our best-of-breed array of Group Policy Solutions, including our popular GPO Reporting PakView a video demo of the Reporting Pak products.

Finally, if you have questions about Group Policy, consider joining our GPTALK mailing list, which is over 1000 members strong and growing!

Thanks for stopping by.

Darren Mar-Elia (a.k.a. the "GPOGUY")

What's happening on GPTalk Mailing List

  • Glennhoppy just posted '[gptalk] Glenn Hopkins is out of the office on SPL, I will return on Tuesday, May 22nd.'

    I will be out of the office starting 05/18/2012 and will not return until 05/22/2012. I will respond to your message when I return. If you need immediate assistance, please call the help desk. For other requests, please contact Garrett Pet...

  • dmarelia just posted 'RE: [gptalk] IE Pop-Up Blocker'

    Actually, I went ahead and tested this and, while I would have expected Admin Templates to lock out the user from making any changes, it doesn't. The user can still add/remove their own sites to the Allow-List and they can't even see the ones that yo...

  • RobertMariani just posted 'RE: [gptalk] IE Pop-Up Blocker'

    Perfect Omar, I used GPP Thankyou Regards, Robert Mariani From: gptalk-owner@lists.gpoguy.com [mailto:gptalk-owner@lists.gpoguy.com] On Behalf Of Omar Droubi Sent: Friday, 18 May 2012 9:42 AM To: gptalk@lists.gpoguy.com Subje...

  • omar just posted 'RE: [gptalk] IE Pop-Up Blocker'

    If you use User\Preference\InternetSettings à and select the appropriate version of IE you support you can set the popup exception preference and still leave it available for end user manipulation. Or you need to script it or simply locate ...

  • RobertMariani just posted '[gptalk] IE Pop-Up Blocker'

    Hi All, I am getting mixed reports from Google that filling in User Config/Admin/Win Comp/IE/Pop-Up Allow List Overwrites and locks out user changes. Could this be confirmed. I am looking to add a single popup ex...

  • cedricthg just posted 'RE: [gptalk] IE settings not applying'

    I found the root cause, local computer policy had Comp\Admin templates\Windows comp\IE\Make proxy per-machine (rather than per-user) - enabled. Hence no proxy settings From: gptalk-owner@lists.gpoguy.com [mailto:gptalk-owner@lists.gpoguy....

  • dmarelia just posted 'RE: [gptalk] IE settings not applying'

    What he means is that IE Maintenance has two modes-Policy mode means that each time policy is processed, it applies the settings. Preference mode means that the setting is delivered once and then never again. Also note that even in policy mode, IE Ma...

  • cedricthg just posted 'RE: [gptalk] IE settings not applying'

    Internet Explorer Maintenance is under Policies From: gptalk-owner@lists.gpoguy.com [mailto:gptalk-owner@lists.gpoguy.com] On Behalf Of Darragh O'Shaughnessy Sent: 15 May 2012 14:49 To: gptalk@lists.gpoguy.com Subject: RE: [gptalk] IE settings ...

  • DarraghOShaughnessy just posted 'RE: [gptalk] IE settings not applying'

    Aren't IE settings treated as preferences rather than policy unless depending on the mode selected? Are you using preference mode? From: gptalk-owner@lists.gpoguy.com [mailto:gptalk-owner@lists.gpoguy.com] On Behalf Of Peacock Adrian Sent...

  • cedricthg just posted 'RE: [gptalk] IE settings not applying'

    Proxy and exceptions. From: gptalk-owner@lists.gpoguy.com [mailto:gptalk-owner@lists.gpoguy.com] On Behalf Of Darren Mar-Elia Sent: 15 May 2012 14:41 To: gptalk@lists.gpoguy.com Subject: RE: [gptalk] IE settings not applying What settings ar...

Join in the fun by subscribing here

Announcements

Announcements

Syndicate  
A New Year's Greeting from GPOGUY and SDM Software Founder Darren Mar-Elia - Tuesday, January 03, 2012

Darren Mar-Elia talks about 2011 and looks forward to the new year for SDM Software and GPOGUY.COM

 read more ...
Update WMI Filter Test Utility Provides timings - Friday, July 08, 2011

Updated WMI Filter Test Utility now provides timing data that lets you determine if a given WMI filter will take too long to process.

 read more ...
Update to Registry Policy Viewer Utlility - Tuesday, December 21, 2010

Check out the latest update to the Registry Policy Viewer tool (version 1.2), which now includes export to CSV and copy-to-clipboard features!

 read more ...
New Blog entry on backing up and restoring the local GPO - Friday, July 23, 2010

Check out my new blog on a script that Microsoft provides for backing up and restoring the local GPO!

 
GPOGUY founder Darren Mar-Elia now twittering on Group Policy - Monday, November 02, 2009

GPOGUY.COM and SDMSoftware.com founder Darren Mar-Elia is now using Twitter to communicate useful tidbits related to Group Policy. You can find him at www.twitter.com/grouppolicyguy!

 

 read more ...
New GPO Version Powershell Cmdlets - Thursday, June 04, 2009

New Powershell cmdlets that let you retrieve GPO version information and "touch" GPO versions on a GPO.

 

 read more ...
SDM Software ships new GPO Compare Product - Friday, November 21, 2008

The commercial "wing" of GPOGUY.COM, SDM Software, has shipped a cool new product called GPO Compare. This product lets you graphically compare the differences between two GPOs and output those differences to reports. Check it out!

 read more ...
ADMX versions of Office 2003 ADM templates! - Monday, November 17, 2008

Fellow Group Policy MVP Alan Cutherberson, of SysProSoft, has gone through the trouble of converting the Office 2003 ADM files to the Vista/2008 ADMX version (presumably just for English!). Check them out at http://www.sysprosoft.com/adm_to_admx.shtml

 read more ...
WMI Filter Test Utility Updated! - Friday, November 07, 2008

We've updated the WMI Filter Test Utility to support WMI Filters that contain multiple WQL statements (queries). Check out the new version 1.0.3!

 

 read more ...
New Whitepaper: Group Policy Preferences Overview - Wednesday, September 03, 2008
Since enough people have asked, "What is Group Policy Preferences?", I put together a short whitepaper that goes through the feature, its requirements and what it does. Enjoy! read more ...
Picking up computer group membership changes without a reboot - Tuesday, August 26, 2008

If you're using GP-based security group filtering to control GP processing by computers, then you know that, normally, when you need to make a change to a computer's group membership, it must be rebooted to pick up that change. However, check out this blog posting I wrote recently for a way around this:

http://sdmsoftware.com/blog/2008/08/picking_up_computer_group_memb.html

 
The new Group Policy book is available - Wednesday, May 21, 2008

The new Group Policy book is out, published as part of the 7-book Microsoft Windows Server 2003 Resource Kit, 2nd edition and also available individually for sale!! The book, called the "Windows Group Policy Guide", can also be purchased as part of the complete Resource Kit.

 
New Group Policy Book Available! - Wednesday, May 21, 2008

I just wanted to let everyone know that Microsoft Press has released a new version of the popular "Goup Policy Guide" book that fellow GP MVP Derek Melber and I contributed to a couple of years ago. This time Derek took the project on himself and the result is a great companion for navigating the new features within Group Policy in Server 2008 and Vista! Everyone who is doing anything with Group Policy should have this book on their desk!

 
Microsoft released a nice paper describing how to use the new Group Policy features in Vista - Tuesday, May 20, 2008

Microsoft has released a nice paper describing how to use the new Group Policy features in Vista. There is a link to it here. It also includes an explanation of why logon scripts sometimes won't work in Vista and the workaround.

 
SDM Software ships the new Desktop Policy Manager - Wednesday, April 30, 2008

SDM Software ships the new Desktop Policy Manager product to simplify desktop configuration management using Group Policy!

 
New PowerShell version of RGPRefresh - Wednesday, April 30, 2008

New PowerShell version of RGPRefresh remote GP refresh utility now available on the SDM Software Freeware page

 
New PowerShell cmdlets for GPMC - Friday, November 09, 2007

New PowerShell cmdlets for GPMC now available on SDM Software Freeware Page

 
new-SDMgpo Powershell CmdLet Released! - Tuesday, July 03, 2007

New PowerShell cmdlet new-SDMgpo lets you use PowerShell to create new GPO!

 
New get-SDMgpo PowerShell cmdlet - Friday, March 30, 2007

New get-SDMgpo PowerShell cmdlet for retrieving GPO information from a domain.

 
Updated version of the Vista Central Store Creator Utility - Thursday, February 22, 2007

Updated version of the Vista Central Store Creator Utility that fixes a bug with SYSVOL shares that were redirected to volumes other than the default. Also, a new VBScript that lets you disable the local GPO on pre-Vista systems can be found on the Tools page.

 
New Vista Central Store Creator Utility released. - Friday, January 26, 2007

This simple tool provides a GUI for creating the Vista Central Store for ADMX and ADML file.  See more here.

 
Update to gpolog.adm - Thursday, January 25, 2007

I just did a quick update to gpolog.adm that adds the super-verbose option for userenv logging and also adds the ability to enable Software Restriction Policy logging.

 
Jorge de Almeida Pinto [MVP-DS] updated the event log ADM - Thursday, December 28, 2006

Jorge de Almeida Pinto [MVP-DS] (http://blogs.dirteam.com/blogs/jorge/default.aspx) updated my event log ADM to provide additional Group Policy control of R2 Server's DFS-R, Forwarded Events and Hardware Events logs.

 
SDM Software releases first product! - Monday, December 18, 2006

My new company, SDM Software, which makes Group Policy management products, released its first product today-- the GPHealth Reporter! -- which reports on the health of GP processing on a local or remote system.

 
MS Whitepaper Released: Group Policy features in Vista - Tuesday, December 12, 2006

Microsoft has released a nice paper describing how to use the new Group Policy features in Vista. I have a link to it here. It also includes an explanation of why logon scripts sometimes won't work in Vista and the workaround.

 
A new training video "Using Administrative Templates Policy" - Wednesday, November 22, 2006

Finally! A new training video--"Using Administrative Templates Policy", on the Training Page

 
Microsoft released a new free download to migrate custom ADM's to Vista's ADMX - Friday, November 17, 2006

Microsoft released a new free download that let's you migrate custom ADM files to Vista's new ADMX format. It also includes a free ADMX editor to create ADMXs from scratch. You can get it here.

 
GPSI Viewer has been updated - Sunday, November 05, 2006

The GPSI Viewer tool has been updated to include Date Created and Date Last Modified fields 

 
Prevent Users from getting IE7 via Windows Update - Thursday, November 02, 2006

Now that IE 7 is here, you can prevent your users from getting it automatically in a Windows Update download by using a Group Policy template provided by MS. Check out the IE 7 Blocker Toolkit for the ADM file required to do this. Keep in mind that the setting in this ADM is a "preference", not a policy, and therefore must be disabled rather than set to "Not Configured" when you're ready to deliver IE 7.

 
Port of gpolog.adm file to the new Vista ADMX format - Wednesday, September 27, 2006

Check out the port of my gpolog.adm file to the new Vista ADMX format on the gpolog Page

 
How Secure is Group Policy? Whitepaper - Friday, September 15, 2006

I've got a new whitepaper that I've written, entitled "How Secure is Group Policy?", that's on the DesktopStandard website at http://www.desktopstandard.com/whitepapers.aspx

 
Lots of tool updates! - Thursday, July 27, 2006

Lots of tool updates! I've updated both the PolViewer and SIViewer (now called GPSI Viewer) utilities with some requested features. I've also got a new tool call WMIFTest that lets you view, print out and validate WMI Filters against computers in your environment so that you can see ahead of time where they will evaluate true or false. Check it out on the Tools page!

 
New training video entitled, "Basic Group Policy Troubleshooting" - Thursday, July 20, 2006

New training video entitled, "Basic Group Policy Troubleshooting", on the Training page.

 
New training video entitled, "Understanding Domain Account Policy" - Friday, May 19, 2006

New training video entitled, "Understanding Domain Account Policy", on the Training page.

 
New version (1.6) of the rgprefresh utility - Thursday, May 18, 2006

New version (1.6) of the rgprefresh utility that adds additional options for suppressing reboots and logoffs during a refresh event, on the Tools page.

 
New version of Group Policy logging ADM file - Friday, May 05, 2006

New version of Group Policy logging ADM file that includes some GPMC logging is available on the Tools page!.

 
New version of rgprefresh utility - Tuesday, April 04, 2006

New version of rgprefresh utility is available on the Tools page!

 
The latest training video, #100.4 is up on the Training page! - Tuesday, March 21, 2006

The latest training video, #100.4 is up on the Training page! This wraps up the 3-part training series on GPMC. Next, I'll be diving into individual GP features.

 
Microsoft has released a number of new GP-related resources - Friday, January 13, 2006

Microsoft has released a number of new GP-related resources, including an FAQ, information on GP changes in Windows Vista and Longhorn server and information on the new ADMX template format coming in Vista. See the Resources page for links.

 
Check out the new Group Policy Training page - Friday, January 06, 2006

Check out the new Group Policy Training page, where I'm posting video training clips about all aspects of Group Policy! Check the ones I have out there now and let me know what you think!

 
New things going on today - Wednesday, December 21, 2005

Well, there's a couple new things going on today. The first is that like everyone else on the planet, I've started a blog. And as you can imagine, its related to Group Policy. The nice people at dirteam.com are hosting it so check it out and let me know what you think. Speaking of the blog, the most recent posting on the blog is about the Registry.pol file, which holds the registry-related policy settings within a GPO. Within that blog entry I talk about my newest utility--PolViewer--which you can download from the Tools page on this site.

 
Added new custom ADM template that lets you set event log size - Monday, December 12, 2005

Added new custom ADM template that lets you set event log size and retention methods for the AD, DNS and FRS logs on your AD Domain Controllers. These logs are not supported within the native event log settings under Computer Configuration\Windows Settings\Security Settings

 
Check out the FAQ page - Friday, October 21, 2005

Check out the FAQ page for an interesting new KB article that describes a hotfix that lets you ensure that the DC that handles requests for AD information is also the same one that handles requests for SYSVOL information. This solves the problem where a workstation might use one DC to get its list of GPOs to process and another DC to copy the settings from the GPTs for those GPOs.

 
Differences in ADM files between the new Server 2003, SP1 release and the ADMs provided with XP, SP2 - Thursday, April 14, 2005

I've created a page that shows a quick analysis of the differences in ADM files between the new Server 2003, SP1 release and the ADMs provided with XP, SP2. Check it out here.

 
Latest Free Video's

Latest Free Video's

Latest Free Tools

Latest Articles

Group Policy Preferences Overview Whitepaper by Darren
 This whitepaper provides an overview of the requirements for using the new Group Policy Preferences feature, and a quick overview of each new policy area within the product. Click on the Read Mo...
Understanding Group Policy Storage by Darren
Group Policy leverages a complex and sometimes inconsistent model when it comes to storing the settings that you specify within a Group Policy Object (GPO). This is probably owing to the fact that, wh...
Understanding Policy "Tattooing" by Darren
     You've probably heard of registry tattooing as it relates to NT 4 system policy. Tattooing was the effect that you saw whenever you applied a registry policy to a computer or ...
Deploying Software With Group Policy by Darren
Whitepaper describing how to use the Software Installation feature in Group Policy. (3rd party whitepaper--requires registration) Register Here
How secure is Group Policy? by Darren
Whitepaper describing the security of the Group Policy infrastructure itself (3rd party whitepaper--requires registration)

Latest Added / Updated FAQ's

Where can I get a list of ADMX files that Microsoft provides for it's products?

Read More

How do I know if a particular software restriction policy rule is applying or not, to a given application?

Read More

How does Windows determine when to apply the Standard Profile and When to apply the Domain Profile for Windows Firewall policy settings?

Read More

Is there a way to use ADM templates to populate registry values under the HKEY_USERS hive?

Read More

I've loaded some custom ADM files into my GPO but the GP editor tool doesn't seem to show them. I only see the container node on the left, but not the custom policy items on the right?

Read More
Banner Inv
Copyright 2009 by GPOGUY.COM
Terms Of Use