Managing Forefront Endpoint Protection (FEP) with Microsoft Group Policy (GPO)
KB ID 0000604 Problem FEP is Microsoft’s offering for antivirus, try to think of it as the corporate version of Security Essentials. Just about everything on the net for managing it seems to be geared to managing it with SCCM. Which is fine if you have SCCM, but what if you don’t? Thankfully you can manage it with group policy, even if information on how to do it is rarer than hens teeth! With a Microsoft CoreCAL you can...
Enable the Local Administrator & Set the Local Administrators Password via Group Policy
KB ID 0000641 Problem Microsoft disabled the local administrators account for a good reason, (its GUID it always the same, and its a well known attack vector into Windows). That said, if you have a problem on the domain, and you want to get into a client machine directly, not having the local admin enabled can be a pain. Note: If you deploy your machines via WDS you can add a local admin account (with a different name) to your...
Disable ‘Offline Files’ with Group Policy
KB ID 0000779 Problem You want to disable the ‘offline files feature’ for caching network files and folders. Note: In Windows XP this was called CSC (Client Side Caching). Solution 1. On a domain controller Start > Administrative Tools > Group Policy Management Console. 2. Navigate to where you want to create your policy, or edit an existing one. 3. Navigate to; Computer Configuration > Administrative Templates...
Disable ‘Sleep’ From the Windows Shutdown Button
KB ID 0000851 Problem You want to stop your users being able to select the ‘Sleep’ option from the Windows 7 power button via group policy. Solution 1. On a domain controller Windows Key+R> gpmc.msc {enter} > The Group Policy Management Console will open. 2. Navigate to where you want to create your policy, or edit an existing one, Note: This is a computer policy, make sure the policy is linked to an OU that...
Disable ‘Lock’ From the Windows Shutdown Button
KB ID 0000851 Problem You want to stop your users being able to select the ‘Lock’ option from the Windows 7 power button via group policy. Solution 1. On a domain controller Windows Key+R> gpmc.msc {enter} > The Group Policy Management Console will open. 2. Navigate to where you want to create your policy, or edit an existing one. Note: This is a computer policy, make sure the policy is linked to an OU that contains...