{ "version": "https://jsonfeed.org/version/1.1", "title": "gpo", "home_page_url": "https://evotec.xyz/es/tags/gpo", "feed_url": "https://evotec.xyz/es/tags/gpo/index.feed.json", "description": "Evotec Main Website", "items": [ { "id": "https://evotec.xyz/es/blog/the-only-command-you-will-ever-need-to-understand-and-fix-your-group-policies-gpo", "url": "https://evotec.xyz/es/blog/the-only-command-you-will-ever-need-to-understand-and-fix-your-group-policies-gpo", "title": "The only command you will ever need to understand and fix your Group Policies (GPO)", "summary": "I\u2019ve been working on cleaning up Group Policies for a couple of months. While it may seem trivial, things get complicated when you\u2019re tasked with managing 5000 GPOs created over 15 years by multiple teams without any best practices in mind. While working on GPOZaurr (my new PowerShell module), I\u2019ve noticed that the more code I wrote to manage those GPOs, the more I knew passing this knowledge to admins who will be executing this on a weekly/monthly basis is going to be a challenge. That\u2019s why I\u2019ve decided to follow a similar approach as my other Active Directory testing module called Testimo. I\u2019ve created a single command that analyses Group Policies using different methods and shows views from different angles to deliver the full picture. On top of that, it provides a solution (or it tries to) so that it\u2019s fairly easy to fix \u2013 as long as you agree with what it proposes.", "date_published": "2021-01-24T17:15:04.0000000Z", "tags": [ "active directory", "gpo", "group policy", "powershell" ] }, { "id": "https://evotec.xyz/es/blog/using-win32_useraccount-wmi-filter-in-powershell-group-policies-and-what-to-avoid", "url": "https://evotec.xyz/es/blog/using-win32_useraccount-wmi-filter-in-powershell-group-policies-and-what-to-avoid", "title": "Using Win32_UserAccount WMI filter in PowerShell/Group Policies and what to avoid", "summary": "Some months ago, I created PowerShell Script to create local administrative users on workstations \u2013 Create a local user or administrator account in Windows using PowerShell. It\u2019s a bit overcomplicated, but the goal was it should work for Windows 7 and up, and that means supporting PowerShell 2.0. As part of that exercise, I\u2019ve been using Win32_UserAccount WMI based query to find local users and manage them to an extent. While Get-LocalUser exists, it\u2019s not suitable for the PowerShell 2.0 scenario. I also use the same query in GPO for WMI filtering. You can say it\u2019s been a good friend of mine.", "date_published": "2020-06-02T15:45:54.0000000Z", "tags": [ "active directory", "ad", "gpo", "powershell", "wmi" ] }, { "id": "https://evotec.xyz/es/blog/active-directory-dfs-health-check-with-powershell", "url": "https://evotec.xyz/es/blog/active-directory-dfs-health-check-with-powershell", "title": "Active Directory DFS Health Check with PowerShell", "summary": "One of the critical parts of Active Directory is DFS. It allows you to share same NETLOGON/SYSVOL folders across all Domain Controllers in your Forest. Its health is vital to the functionality of your Active Directory. If it\u2019s broken, a lot of things may not work, and it\u2019s not that easy to tell the status of it. At first sight, everything may seem to work correctly, but if you take a closer look \u2013 not so much. It\u2019s great if you find it out by yourself, but not fun if suddenly GPO\u2019s don\u2019t apply to some users, computers, and you find out a year later.", "date_published": "2020-02-20T20:29:20.0000000Z", "tags": [ "active directory", "adessentials", "dfs", "gpo", "PowerShell", "testimo" ] }, { "id": "https://evotec.xyz/es/blog/finding-gpos-missing-permissions-that-may-prevent-gpos-from-working-correctly", "url": "https://evotec.xyz/es/blog/finding-gpos-missing-permissions-that-may-prevent-gpos-from-working-correctly", "title": "Finding GPOs missing permissions that may prevent GPOs from working correctly", "summary": "I\u2019ve been in IT for a longer time now. I\u2019ve made my fair share of mistakes and misconfigurations. One of those misconfigurations was removing Authenticated Users from Security filtering in Group Policy Objects. While it worked fine at some point Microsoft rolled out a Hotfix MS16-07 on June 14th 2016.", "date_published": "2020-02-19T21:08:35.0000000Z", "tags": [ "active directory", "adessentials", "gpo", "powershell" ] }, { "id": "https://evotec.xyz/es/blog/create-a-local-user-or-administrator-account-in-windows-using-powershell", "url": "https://evotec.xyz/es/blog/create-a-local-user-or-administrator-account-in-windows-using-powershell", "title": "Create a local user or administrator account in Windows using PowerShell", "summary": "Recently I got a simple task to implement LAPS for the newly created local user instead of using the built-in local administrator account. It seemed easy at first. Go to Group Policies, create a new user, add it to an administrators group, and then follow standard steps to implement LAPS. That is until you find out it\u2019s actually not possible anymore due to password encryption key being available in the wild, which made Microsoft block that Group Policy Preference. While that road is blocked, I still need to get my user-created somehow. Let\u2019s do it with PowerShell. It\u2019s quite simple \u2013 use New-LocalUser a few parameters, some random password that I don\u2019t need to save as LAPS will overwrite it. Except it\u2019s not available on PowerShell 2.0, which is the default for Windows 7 that I have to support. Things get even more complicated if you consider that Administrators group is called differently in different countries. While I stopped supporting anything below PowerShell 5.1, I can\u2019t say if it\u2019s the project requirement.", "date_published": "2019-10-30T13:44:27.0000000Z", "tags": [ "administrator", "gpo", "powershell", "Windows" ] }, { "id": "https://evotec.xyz/es/blog/prepare-windows-10-start-menu-computers-active-directory", "url": "https://evotec.xyz/es/blog/prepare-windows-10-start-menu-computers-active-directory", "title": "Prepare Windows 10 Start Menu for all computers in Active Directory", "summary": "Windows 10 in my humble opinion is very good system. It has it\u2019s pros and cons but so does each\u2026", "date_published": "2018-01-26T14:08:44.0000000Z", "tags": [ "1703", "1709", "Active Directory", "gpo", "gpresult", "gpupdate", "group policy", "powershell", "powershell editor", "powershell ise", "start menu", "Windows", "windows 10", "windows 10 1703", "windows 10 1709" ] } ] }