Active Directory: Restore default GPOs Default Domain Policy / Default Domain Controller Policy

In this tutorial, we will see how to restore GPO Default Domain Policy / Default Domain Controller Policy to default. On domain controllers, a DCGPOFIX command line tool is available to restore the 2 default policies. Before proceeding with the restoration of the policies, I advise you to make a backup of this one before. …

Read more



Active Directory : configure a central store for ADMX / ADML files

In this “How” tutorial, I will explain how to create a central store to centralize the group policy definition files (ADMX / ADML).The central store allows file replication using the SYSVOL directory of domain controllers and therefore having the same configuration on all the controllers.



AppLocker : configuration in an Active Directory environment

Presentation In this tutorial, we will see how to configure AppLocker in an Active Directory environment using group policies. AppLocker is a Windows feature that is similar to a firewall at the application level. AppLocker allows you to control the applications running on computers. AppLocker is able to act on: Executables (.exe). Windows Installer (msi, …

Read more



Bitlocker : store recovery password in Active Directory

Presentation In this tutorial, we will see how to store the Bitlocker recovery password in the Active Directrory. The recovery password is requested when the user forgets his pin code or when he wishes to access the hard disk on another computer when the TPM module has been used. Viewing passwords is done using the …

Read more



GPO: add a registry key

Intro In this tutorial, we will see how using a group policy, add a registry key. With group policies, it is also possible to delete or modify the value of an existing key Depending on the hive (HKLM / HKCU), the strategy should be placed on the correct OU (Organizational unit) and the correct computer …

Read more



Security: prevent local logon on Windows servers

Intro In this tutorial, we will see how to prevent local logon on Windows servers. What you should know is that by default all users are allowed to log on locally to Windows except for domain controllers. For servers in Workgroup, the problem is less posed but for servers members of a domain, all users …

Read more



GPO : configure automatic session locking

Overview of the strategy

Presentation In this tutorial, we will see how to activate automatic session locking after a period of inactivity. This group policy increases the level of security, because many users do not lock their session when they leave their workstation. The parameters that we will configure apply to Users. Activate automatic session lock From a domain …

Read more



GPO: Central store

Vérification via l'éditeur de l'utilisation du magasin central

Presentation of the central store The central store makes it possible to share and synchronize all of the Group Policy Definition (ADMX) files on all of the domain controllers by relying on the SYSVOL folder. By default the ADMX files are in the C:\Windows\PolicyDefinitions folder which is specific to each domain controller. It is also …

Read more



GPO Login Script

Presentation In this tutorial, we will see how to set up a GPO that will execute a logon script. Logon scripts are usually in batch or vbs format, it is also possible to run PowerShell scripts. The use of script in PowerShell requires to authorize the use of remote script (set-executionpolicy), it is also necessary …

Read more



Work Folders: Installation and Configuration

Presentation The Work Folders feature allows you to set up a personal folder synchronized with a file server in HTTP (s) using a client available on Windows, Android and Apple. If web access is published on the Internet, this solution can synchronize files even from outside the company for mobile users. Work Folders are similar …

Read more