Managing IE Settings via GPO
Jan07

Managing IE Settings via GPO

KB ID 0001269 Dtd 07/01/17 Problem There used to be a GPO called  "Internet Explorer Maintenance" that you could set your Internet Explorer settings, i.e. Proxy server settings, home pages etc. This has now gone, and has been replaced with a group policy preference.   Solution From the Group Policy Management Console > Locate the OU containing the USERS  you want to link the policy to and create a new policy, then give it a...

Read More
Windows 10 Create a WMI Filter for Group Policy
Jan04

Windows 10 Create a WMI Filter for Group Policy

KB ID 0001267 Dtd 04/01/17 Problem I was messing around with some GPO’s for ¬†client today to replace ‘Edge’ as the default browser, (with IE11). To make the whole process more efficient, I wanted to use a WMI filter toapply the policy only to Windows 10 machines. Before this used to be simple enough, you just set the Windows version in a WMI query. But because it searches for a string e.g. 6.1 (for Windows 8.1),...

Read More
Group Policy To Throttle Network Speed via QoS
Jul06

Group Policy To Throttle Network Speed via QoS

KB ID 0001217 Dtd 06/07/16 Problem Why would you want to do this? Well what if you want to test slow link group policy processing, or you are testing BranchCache? Using Group policy you can ‘throttle’ traffic to and from a particular IP address. Below I will pick a domain client on 192.168.110.120, and throttle¬†all traffic between that client, and the domain controller to be 100kbps. ¬† Solution As I sad above I’m...

Read More
Windows BranchCache (Hosted and Distributed)
Jun28

Windows BranchCache (Hosted and Distributed)

KB ID 0001212 Dtd 27/06/16 Problem The purpose of BranchCache is, (as the name implies) to cache files in branch sites, without the need for a local file server or DFS. There are essentially two deployment models, In Hosted Mode a server in the branch caches the files locally as they are requested by clients. This works because the main file server provides a hash of the requested file, the branch server will download it, and if...

Read More
Remote Desktop Services – Securing By Group Policy
Jun24

Remote Desktop Services – Securing By Group Policy

KB ID 0001211 Dtd 24/06/16ProblemNote: This is not an exhaustive list, but it's what I use when securing Remote Desktop Services, (Terminal Services) servers. Some of these settings are ONLY for Server 2012 R2 and later. If you have any settings you think are omitted, please comment below. SolutionUser Access To RDSIf you want to create a Domain security group for RDS users than please do so. BE AWARE the 'Remote Desktop Users' group...

Read More
How to track the source of failed logon attempts in Active Directory
Jun23

How to track the source of failed logon attempts in Active Directory

KB ID 0001209 Dtd 23/06/16 Problem If a large number of failed logon attempts occur within a certain period of time it could be an indication of a security threat, which is why it is important that organizations have a pro-active means of auditing and monitoring whenever this happens. There are a number of ways you can perform this audit, one of which is using the native tools. Here we will take you through the steps so that you know...

Read More