posts tagged with ‘GPO’
I recently ran into a GPO problem. My customer wanted to delegate different group policy settings on clients within a specific OU.
The OU contained numerous versions of Windows and all versions had different, OS version specific, settings.
When setting up Active Directory delegation, you want administrators to be able to maintain Group Policy without being a Domain Admin.
If you read TechNet, Microsoft tells you to use Group Policy Creator Owners. However CO does not have permissions to modify or edit any other group policy objects.
If you’re having trouble deploying the SCCM client and you’re getting Error 53 you should verify that the Client Installation account is local administrator and that Remote administration is turned on.
Today I ran into an issue with Internet Explorer on a Windows 2008 R2 server.
I have a GPO that pushes Local Intranet and Trusted sites but they would not be visible through the GUI in Internet Options.
A customer of ours asked us to look into making their environment more secure. However we noticed that they did not audit Group/User changes in their Active Directory, we adjusted this and here’s a quick guide how to deploy it in your corporation.