There are multiple ways to block GPO from applying to specific users or computers. While methods like item-level targeting, security filtering, or WMI filtering, can practically provide better control of the policy scope, administrator also needs to know that one can block GPO using delegation option in Windows. This is not the best way to […]
Every Windows OS comes with a native firewall as the basic protection against malicious programs. Windows Firewall controls the incoming and outgoing traffic from and to the local system based on the criteria defined in the rules. The criteria can be program name, protocol, port, or IP address. In a domain environment, administrator can centrally […]
GPO loopback processing is a mechanism that allows user policy to takes effect only on certain computers. Normally, user policy is linked to the user OU and will be applied regardless of which computer the user is signed in. However in this case, user policy is linked to the computer OU and will not takes […]
The previous article already discussed about completely disable control panel access on a managed Windows computer to harden the security of computer settings. However, this restriction could give bad experience to the end users. Sometimes access to control panel is required for troubleshooting basic problems, but users won’t be able to do that without access […]
The previous article has already covered about creating Group Policy to map network drive. As result of default behavior of Group Policy, drive mapping will appear for all users under the OU where the policy is linked. A more strict control is required in such case where each users must receive different drive mappings based […]
WMI or Windows Management Instrumentation is a set of standards from Microsoft that provides user with information status of a Windows machine. Information obtained from WMI can be used to create a condition where a specific action or setting may apply, including Group Policy object. Applying WMI filter to Group Policy allows controlling the scope […]
Windows 10 comes with lock screen image that can be customized in control panel. Just like wallpaper, there is a centralized way to control the lock screen image which is using Group Policy. In a managed domain like corporate environment, they typically would want to show company-branded image or a disclaimer on the computer lock […]