As I mentioned in my previous blog post there is a new Group Policy setting called “Redirect folders on primary computers only”. As the descriptions says this ”policy setting is useful to improve logon performance and to increase security for user data on computers where the user might not want to download private data, such as on a meeting room…

INI Files are one of those things that most administrators probably still need to mange in your environment due to one of those (crapy) apps that still not made the jump to registry keys. This is were there INI feature of Group Policy Preferences can be a great help in managing these files. What is really great about this option…

Removable memory sticks are the back door for data in any organisation. BitLocker to Go can do some way to controlling this vector however you might want to simple close off all access to removable drives for all your users. So if you are running Windows 7 you will be glad to know there are a heap of Windows 7…

If you have ever read my Best Practice for Group Policy blog post then you will know that I encourage you to edit the default domain GPO’s sparingly. The only exception I would make to this rule is when you want to modify the default domain password policy but even then you can create a new password policy GPO linked…

Remote Desktop Virtualisation is a feature of Windows that allows your users to run windows running remotely from server hardware. This is almost an identical concept with how Terminal Services (a.k.a. Remote Desktop Services, a.k.a. Remote Desktop Session Host) works where the users is sending keyboard and mouse messaged to the server and then receives the screen updates back. It…

Changing file association windows by hacking the registry can be a very challenging task even if you are using Group Policy Preferences Registry option to apply the changes. However there is an option with Group Policy Preferences that allows you to change the Open With (i.e. File association) for any file type. Below I show you how you can do…

One strange thing that still seems to catch a lot of people out is that you can only have one password policy for your user per domain. This catches a lot of people out as they apply a password policy to an OU in their AD thinking that it will apply to all the users in that OU…. but it…

This article is a continuation of the other blog post I have previously published at Best Practice: How to deploy software using Group Policy. I highly recommend that you take to the time to review the other blog posting before continuing on reading this post. Most particularly if you are looking at using Group Policy to deploy software please review…