StevenWhiting.com

A place for info I've learnt in IT & stuff. (I get a little kick back from affiliate ads & links, just so you are aware)

Browsing Posts tagged Group Policy

Computer Config\Policies\Admin Templates\Windows Components\Windows Update\Do not connect to any Windows Update Internet Locations

We set this to enable but, as it says, it has the knock on effect that no one can download apps from the Windows Store when enabled. But we enabled this because via the Windows Store you can bypass WSUS and install Windows updates. Which someone did back when an old build of Windows 10 was released that was bricking machines. Lucky the 3 users that had managed to install it, via the Windows Store, were OK but had to rebuild their machines after.

Group Policy

Where the scripts etc are stored so you can edit them as if you go to the normal location as domain admin which is

\\DOMAIN NAME\NETLOGON\Scripts

You won’t have permissions but you will have access to the below area.

C:\Windows\SYSVOL\sysvol\DOMAIN NAME

You might not be able to write directly to it but you can create your scripts else where then copy them into there.

OrcaMSI Editor

Orca MSI Editor. You can either take the long winded way of getting the file or download from here.

http://ge.tt/8ypwT1s2

When I uploaded it the link was valid and secure, lets hope it stays that way.

Very useful for editing MSI files for Group Policy.

gpedit.msc /gpcomputer: Computername

The account you’re logged into needs to have admin rights over that machine. If it don’t, then use your domainadmin account. So you’ll want to run a cmd as your domain admin. To make it easier create a batch file with

runas /user:domainname\admin C:\WINDOWS\system32\cmd.exe

Then in that cmd window type

gpedit.msc /gpcomputer: Computername

For example

gpedit.msc /gpcomputer: a4474

While I’m on DOMAIN1 still, to do it to a machine on DOMAIN2, try using the DOMAIN2\domain2admin account as my domain admin from DOMAIN1 doesn’t work.

secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose

Group Policy

On XP type rsop.msc to find more Group Policy results. Appears to give more info than gpresult.

http://www.404techsupport.com/2010/05/11/rsop-and-gpresult-must-know-tools-when-using-group-policy/