Managing IE Settings via GPO
Jan07

Managing IE Settings via GPO

KB ID 0001269 Dtd 07/01/17 Problem There used to be a GPO called  "Internet Explorer Maintenance" that you could set your Internet Explorer settings, i.e. Proxy server settings, home pages etc. This has now gone, and has been replaced with a group policy preference.   Solution From the Group Policy Management Console > Locate the OU containing the USERS  you want to link the policy to and create a new policy, then give it a...

Read More
Windows 10 Create a WMI Filter for Group Policy
Jan04

Windows 10 Create a WMI Filter for Group Policy

KB ID 0001267 Dtd 04/01/17 Problem I was messing around with some GPO’s for ¬†client today to replace ‘Edge’ as the default browser, (with IE11). To make the whole process more efficient, I wanted to use a WMI filter toapply the policy only to Windows 10 machines. Before this used to be simple enough, you just set the Windows version in a WMI query. But because it searches for a string e.g. 6.1 (for Windows 8.1),...

Read More
Move AD Group Members to an OU
Dec23

Move AD Group Members to an OU

KB ID 0001266 Dtd 23/12/16 Problem I got asked to do this at work this week, PLEASE BE AWARE, moving users about within AD may drastically change the way your 'User Group Policies' are being applied. So do some Group Policy Modelling beforehand, to avoid any problems. Solution In the example above, I've got ten users in a security group called 'Source-Group'. For simplicity, they are all in the same source OU as well, (but they don't...

Read More
Adding a Windows Server 2016 Domain Controller
Nov25

Adding a Windows Server 2016 Domain Controller

KB ID 0001262 Dtd 24/11/16 Problem Once upon a time, adding a domain controller that was running a newer version of the Windows Server family involved opening command line and schema prepping, and GP prepping etc. Now all this happens in the background while the wizard is doing the heavy lifting for you. Solution Obviously the server needs to be a domain member first! With a vanilla install Server Manager will open every time you...

Read More
Windows Server 2016 – Locating, Transferring, and Seizing FSMO Roles
Nov10

Windows Server 2016 – Locating, Transferring, and Seizing FSMO Roles

KB ID 0001257 Dtd 10/11/16 Problem I've written about transferring and sizing FSMO roles, (Flexible Single Master Operations) before, see the following article; Transferring Your FSMO Roles Now you have a PowerShell Commandlet to help 'Move-ADDirectoryServerOperationMasterRole'. Solution As before you can view your FSMO role holders, by using the following command. netdom query fsmo To transfer them to another server, (in the case a...

Read More
Install and Configure Certificate Enrolment Policy Web Service
Oct26

Install and Configure Certificate Enrolment Policy Web Service

KB ID 0001250 Dtd 26/10/16 Problem A client had moved a domain joined server into their DMZ, and while they had opened the correct ports for Domain Authentication on their firewall, no one had considered the certificates on the server which had expired, and could not be renewed.  Some research, pointed me towards Certificate Enrolment Web Service. Its job is to let clients enrol and renew certificates, from either non domain joined...

Read More