WHERE SMART GROUP POLICY ADMINS

COME TO GET SMARTER

Feb
25
2015

How To Enable UNC Hardened Access to Prevent JASBUG (MS15-011/KB3000483 & MS15-014/KB3004361)

I didn’t write this. But fellow GPanswers.com Team Member Charles Palmer did ! But, I did have the LEAD GUY at Microsoft (name withheld) check out this post and give it a once-over for accuracy. Got the THUMBS UP, so here’s the how-to. Thanks Charles and also Microsoft. — Microsoft released these two updates in Feb 2015. You can read more about them here: http://blogs.technet.com/b/srd/archive/2015/02/10/ms15-011-amp-ms15-014-hardening-group-policy.aspx with an additional FAQ here: http://blogs.technet.com/b/askpfeplat/archive/2015/02/23/guidance-on-deployment-of-ms15-011-and-ms15-014.aspx In addition to the two KB’s above, KB3004375 is installed at the same time as KB3000483 as they work together. KB3000483 also requires additional configuration in Group Policy. The […]

Feb
25
2015

JESBUG GP Vulnerability — Advice

Microsoft put the petal to the metal and put together a great Q&A about the “JESBUG” GP Vulnerability. To be clear, it’s NOT just a GP vulnerability, but really SMB (the thing that does “sharing”) on your servers.   The link to that FAQ is now at: http://blogs.technet.com/b/askpfeplat/archive/2015/02/23/guidance-on-deployment-of-ms15-011-and-ms15-014.aspx   For me, the #1 question I get is … “Where is the ADMX file they keep mentioning and how do I get it installed?” The answer is IN the FAQ. And if you need a refresher on how to update the Central Store, then the BASIC gist is here in this […]

Feb
6
2015

Group Policy Preferences: Powerful *AND* mysterious.

I think the reason that GPPreferences is both heralded and feared, is that … they are both POWERFUL but MYSTERIOUS. In my GP Training class we spend a WHOLE DAY and then some on the GPPrefs.. because.. of both of their POWER and their MYSTERY. I found these quickie introductory articles on the GPPrefs and thought I would share them. It’s a three part series.. and a quick read: http://windowsitpro.com/windows-server-2003-end-support/logon-scripts-group-policy-preferences-and-server-2003-migration-par http://windowsitpro.com/windows-server-2003-end-support/logon-scripts-group-policy-preferences-and-server-2003-end-life-part http://windowsitpro.com/windows-server-2003-end-support/logon-scripts-group-policy-preferences-and-server-2003-end-life-pa-0 Just to put a fine point on it: You’ve already paid for the power of the GPPrefs. But if you don’t know what they can do, or exactly […]

Jan
6
2015

GPResults Hotfix for GPMC (and quick demo of PP GP Compliance Reporter)

Microsoft always says “Use the latest GPMC Console.” That advice was great.. until Windows 8.1 because of a big ol’ bug. Which is now fixed ! So if you use Windows 8.1 (or Server 2012 R2) as your GPMC station, check out this video which demonstrates a Microsoft hotfix (and also a workaround to a well known GP Results overall problem.) Here’s the video: GPMC GP Results Hotfix Remember about my upcoming LIVE Group Policy Class. Go to www.GPanswers.com/training for the details ! (and don’t miss out !)

Dec
22
2014

How to buy a laptop for the Regular Person (2014-2015 edition)

This is a yearly re-post / re-edit. It started in 2009 and has been updated yearly. This started out as a post to “just my closest friends” but has become one of my popular blog entries of all time. Here’s my fully updated guide to end-of-year 2014 into 2015. If you’re an IT geek like me, you’re often asked “What kind of laptop should I buy?” If you’’re NOT an IT geek, you’’re likely asking an IT geek friend “What kind of laptop should I buy?” This is a guide for both of you. If you’’re in IT, this question […]

Copyright © GPanswers.com. All rights reserved. GPanswers.com is a service of PolicyPak Software