Group Policy: Deploy a Google Chrome Extension

Google provides an option between an ADM file (windows 2003 server) and an ADMX file (windows 2008). Once imported, the ADM/X file will add additional options to your Group Policy Object. Click here to download the ADM file (Server 2003) Click here to download the ADMX file (Server 2008) Please open your Group Policy Management console. Right click your domain and select […]

Read more

How to Import a Group Policy Object’s Settings into Another Group Policy Object

You may sometimes find it necessary to copy Group Policy Objects (GPOs) from one Active Directory domain to another. This can be useful when you want to apply the same policy settings to groups of users or computers in different domains within a multi-domain forest, or when you are performing a migration from one domain to another. GPOs can be backed […]

Read more

Deploying the Local Administrator Password Solution Part 1

In this series of three posts, I demonstrate the installation and configuration of Microsoft’s Local Administrator Password Solution (LAPS). This is the first post that covers installation of the software on management computers and clients. For links to parts 2 and 3, see the bottom of this post. What is LAPS? LAPS is a solution to change the local administrator (SID -500) […]

Read more

Deploying the Local Administrator Password Solution Part 2

In this series of three posts, I demonstrate the installation and configuration of Microsoft’s Local Administrator Password Solution (LAPS). This is the second post that covers configuration of Active Directory to support LAPS. Configuring Active Directory for LAPS Extend the AD Schema In the last post, we configured the client installation. While there is no server-side software to run as far […]

Read more

Deploying the Local Administrator Password Solution Part 3

In this series of three posts, I demonstrate the installation and configuration of Microsoft’s Local Administrator Password Solution (LAPS). This is the third and final post that covers the group policy configuration of LAPS, as well as a brief demonstration. Configuring Group Policy We’ve got the software installed, and AD configured, all that’s left is to turn the thing on! Fortunately there’s […]

Read more

Add and remove users to AD groups with Group Policy

Group Policy allows you to add and remove users to an Active Directory (AD) group. Using this feature improves security because you can ensure that high-risk security groups only contain the users that you specify via Group Policy. To manage the Domain Admins group, you will need Remote Server Administration Tools(RSAT) installed. After installing that, open up the Group Policy Management […]

Read more

How to deploy (and/or remove) software packages via GPO

One of the greatest advantages of having an Active Directory Domain is the possibility to deploy software packages via GPO (Group Policy Object). Software deployment is crucial in business environments to save time and money. Microsoft not only gives us a simple way to deploy software, but also provides a quick solution to uninstall it when we don’t need it […]

Read more

How to deploy a Registry Key via Group Policy

System administrators often need to deploy one or more Registry Keys in business environment. Customized software or hardware need particolar configurations and companies usually have solutions tailored to their needs. Whatever the reason is, a Group Policy is the best way to deploy a Registry Key in an Active Domain Directory Services. The configuration is quite simple and quick. Open […]

Read more

Server 2012 : GPO to setup local admin and RDP access.

We are going to give access to a Group of people to RDP to Workstations and have local administrators rights. In order for RDP to work we also need to open firewall. While reading you might want to consider to split up this (monolithic) GPO and single Security Group into 2 Security Groups and 3 smaller GPOs : (1) Local Admin […]

Read more
1 2