This video shows how to use the Security Configuration Wizard to create, edit, install, or rollback a security template. It’s available on Server 2008 and Server 2003 if you have service pack one. You can use this as a method of creating Microsoft recommended security settings on your server or Windows client operating system. It’s [...]

The Security Template and Analysis Snap-in (MMC) allows you to compare a security template and the current computer’s security policy. It will make a database to show the difference and then allow you to decide if you want to import the settings from the template into the current local settings. It shows an X where [...]

How to modify, import and export local security templates. Local security templates are great ways to set default security settings or policies. They are very portable and can be quickly used save and apply settings required on a local machine. You can also use them to import custom GPO (group policy object) settings. they are [...]

Restricted groups are a little known option in an Active Directory Domain. They control local group membership on your active directory clients. In this video, I add a domain group to a local group without going to each and every local machine using group policy. This allows me to create membership for a specific group [...]

gpresult is a command line utility for active directory that will display the effects of group policy on a local or remote machine. You can use it to create reports on GPOs affecting users and computers. It’s available for Server 2000, 2003, 2008,  Microsoft, windows xp, vista, and 7. (Requires opening ports on firewall.) The [...]

gpupdate is a command line utility to force group policy updates. Group policy updates every 90 to 120 minutes, but sometimes you don’t want to wait that long. with this program you can do it instantly. I also show how to open a port on the windows firewall to allow you to remotely force group [...]

Group Policy Modeling Wizard is the “what if” of domain controllers. It lets you see what it would be like if you had this group, user, computer, OU all tied together. You can see what kind of group policy restrictions that they would have without having to change your group policy objects (GPO) to see [...]

Group Policy results wizard is available on a Microsoft windows Server 2008 Domain Controller. (You can also get similar from Adminpak.msi, Windows Server 2003 Administration Tools Pack) It allows you to run a report on a specific user and computer. It is a very detailed report on a very specific user and computer that can [...]

It’s important to understand the sequence that group policy uses.  I’m creating this video on Server 2008 domain controller, but it could’ve been done on server 2003 or 2000. Group policies affect all Microsoft operating systems. (2000, xp, vista, 7) ou=organizational unit gpo=group policy object requires a domain controller (active directory) Group Policy Precedence 1.  [...]

ADMX files are the files that dictate group policy options. the problem is that in large organizations ADMX files may not update simultaneously. Then when you go to Group Policy Management Console, you get the local ADMX files. To remedy this problem you can create a central store where all Group Policy options are stored. [...]

This is a video on how to backup and restore a GPO (group policy object) on a server 2008 domain controller. As far as I know, these are mostly new features on Server 2008. You can restore the GPO by importing settings or if you modify it, you can return it to an earlier time. [...]

How to create a GPO (group policy object) on a server 2008 domain controller. I create them, link them to an OU (organizational unit) and show how to find what settings are affected by it. It’s one of the many features of active directory that controls your user’s environment