#group-policy

How-to: Keep getting the password complexity error for a OU that should have it disabled #programming #it #solution

Keep getting the password complexity error for a OU that should have it disabled

I have a specific Organizational Unit in my Active Directory domain that needs to have weak password settings. I set up my GPO and created a new policy for the OU OU=Limited Users,OU=Production,OU=VetWeb,DC=vw,DC=localcalled “GPO for Limited Production Users”. According to Group Policy Modeling I did set up…

Solution: What can be done to properly re-enable the Windows Firewall on a domain? #programming #dev #fix

What can be done to properly re-enable the Windows Firewall on a domain? BACKGROUND/RESEARCH

I honestly believe that questions like this one: Using GPO in Active Directory domain to force workstations Windows Firewall to disabled – how? existed because Windows Admins in general were taught long ago that:

“the easiest thing to do when dealing with a domain computer is to just have a GPO on the…

Fix: Windows 2003 GPO Software Restrictions #it #answer #dev

Windows 2003 GPO Software Restrictions

We’re running a Terminal Server farm in a Windows 2003 Domain, and I found a problem with the Software Restrictions GPO settings that are being applied to our TS servers. Here are the details of our configuration and the problem:

All of our servers (Domain Controllers and Terminal Servers) are running Windows Server 2003 SP2 and both the domain and forest…

Answer: GPO best practices : Security-Group Filtering Versus OU #development #dev #solution

GPO best practices : Security-Group Filtering Versus OU

Good afternoon everyone,

I’m quite new to Active Directory stuff. After upgraded Functional level of our AD from 2003 to 2008 R2 (I need it to put fine-grained password policy), I then start to reorganized my OUs. I keep in mind that a good OU organization facilitate application of GPO (and maybe GPP).But in the end, it feels more natural…

Answer: Windows 2008 R2 gpupdate locks my user account #development #dev #solution

Windows 2008 R2 gpupdate locks my user account

I built a Windows 2008 R2 server last year, and ever since my elevated account locks 10-12 times a day. After much research and testing I found that the server is locking my account at each failed attempt to update Group Policy (about every 90 minutes). I found no information on the web indicating any one else has seen this, and I find it…

Fix: How is software deployed via Active Directory? #programming #development #it

How is software deployed via Active Directory?

What are the steps required for deploying a software package via Active Directory / GPO?

Answer [by paulr]: How is software deployed via Active Directory?

You didn’t specify which version of Windows your domain controllers are using. However, the steps are basically the same for Windows Server 2003 and Windows Server 2008. Microsoft knowledge base

Fix: Is there a performance impact of direct AD universal groups assignment? #computers #it #solution

Is there a performance impact of direct AD universal groups assignment?

I’m implementing a tool which secures certain shared resources within AD forest (mostly file shares). By some criteria a list of users from different domains is generated, those users are added to a universal group (because I need to gather users from different domains in a single group) and then that universal group is added…

Fix: Upgrade software package installed with GPO #dev #programming #answer

Upgrade software package installed with GPO

Since recently I have been using AD policies to deploy software packages through GPO on a small domain. This had been working well, but I am not sure what is the correct procedure for upgrading a package.

Assuming that I have initially deployed X, version a through GPO named “Install X“. All works well and with time version bis released. (Assuming that…