Category: Tutorials
My Group Policy tutorials that I have written
How to implement the ASD Essential 8 via Group Policy
The Australian Government Department called the Australian Signals Directorate has a list of mitigation strategies that is used to help protect IT system against security risks. This list is called the “ASD Essential 8“. While this its generated by the Australian Government department it is an excellent starting point for securing any organisation or government IT Assets. The really great…
Blocked Site Based GPO due to Blocked SOM
I recently came across a problem with applying a site linked GPO to some Citrix servers that were giving Blocked SOM (see below) as the reason for being denied. For the longest time I could not figure out why the GPO was being blocked. It was then with some help that I found out that the computer was in an…
How to Disable SMB1 using Group Policy Administrative Templates
How to disable SMB1 on Windows using the ADMX/ADML files released by Microsoft.
How to disable SMB 1 on Windows 7 via Group Policy to Prevent WannaCry
Update 1: These instructions will mitigate WannaCry / Wcry / WannaCrypt virus propagation on Windows 7 and later (Windows 10 is not affected). For more technical details about the virus see Troy Hunts blog at https://www.troyhunt.com/everything-you-need-to-know-about-the-wannacrypt-ransomware/ In case you have not got the message yet SMB 1 protocol Bad and that according to Microsoft you should “Stop using SMB1â€. Not…
How to disable SSL v2 and SSL v3 on Windows Server via Group Policy
In this article I will show you how to disable the SSL v2 and SSL v3 protocols on the Windows Server so that it no longer offers the depreciated (a.k.a. Broken) SSL v2 and v3 security protocols. It also does not hurt if you apply this policy settings to your Windows client computers in case any of them have IIS with digital certificate enabled….
How to disable SSL v2 and SSL v3 on the client via Group Policy
This article will show you how to disabled SSL v2 and SSL v3 on browsers on the client using Group Policy. SSL v2 and SSL v3 protocols for a long time has been considered to be broken protocols thanks to the many vulnerabilities found in these protocols like BEAST and POODLE to name but a few. While all newer browsers…
How to synchronise Internet Explorer Favourites with Edge
In the latest release of Windows 10 insider preview (Build 15002) there is a new policy setting added that allows you to sync the IE Favourites with Edge. This policy setting allow you as an IT administrator to not have to setup the browser favourites in multiple locations thus reducing duplication of effort. Previously you may have had Group Policy…
How to use Group Policy to configure the Taskbar in Windows 10
In release 1607 of Windows 10, Microsoft has now introduced a way to configured the Windows 10 taskbar using Group Policy. This feature allows Group Policy administrator to now add or replace the application that appear on the taskbar. This actually is the first time since Windows Vista that a Group Policy administrator has been able to configure the taskbar…
