Add a URL to Clients “Trusted Sites” with Group Policy
KB ID 0000146 Problem You want to have a URL added to everyone’s “Trusted Sites” list, and to avoid visiting each machine you want to use Group Policy, Or users don’t have the rights to do this themselves and you want to add one for them, i.e. the URL of your corporate CRM System. Solution The Group Policy you need to edit is, Computer Configuration > Policies (This level is on Server 2008 only) >...
Enable RDP via Group Policy
KB ID 0000043 Problem Rather than enabling on an ad-hoc basis, you want to turn on RDP for multiple machines via Group Policy. Solution Group Policy Location To simply enable RDP, change the following policy; Computer Configuration > Admin Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connections Locate and change the “Allow users to connect remotely using Remote Desktop...
Windows Disable UAC Thorough Group Policy
KB ID 0000041 Problem UAC (User Account Control) – while a good thing, sometimes causes more annoyances than solves problems, to turn it of through group policy do the following. Solution This Policy is a Computer based policy and needs to be applied to Computers NOT Users. Disable UAC On Windows Server 2008 / 2008 R2 Domain With Group Policy 1. On a domain controller or a client running the remote administration tools >...
Disable High Contrast with Group PolicyDisable Accessibility Options with Group Policy
KB ID 0000472 Problem A few weeks back I wrote about a client who was having problems with kids at his school launching the ease of access button from the login screen. And how I disabled the ease of access button. High Contrast After a site visit it seems that the “little darlings” had now worked out that by pressing “Alt+Shift+Print Screen” they could turn on high contrast. And this, which is obviously...
Enable The “Remote Registry Service” through Group Policy
KB ID 0000488 Problem I was rolling out Trend Worry Free Business Security this week, and to send out the client software all the client machines needed the remote registry service enabled. That’s great but it’s set to manual startup be default. As I didn’t want to visit each machine I wanted to do this through group policy. Solution 1. On a domain controller, Start > administrative tools > Group Policy Editor...