Tag Archives | Group Policy

<a href="https://www.flickr.com/photos/gsfc/15618006994/in/photolist-pN7nmE-rjQRm5-dSzo2A-qEAQKJ-qGTuRP-bUzuxV-riVjBA-ee6PqM-8F1eDH-4zms5-eT6whT-nbxsKE-qxoLMF-r74Pq9-cbVu4q-qD8Npg-cE76Ss-fKNeRp-nFYwha-cPfnQ5-odyR5t-roCJtM-pLpPTc-d3dknb-98h4hb-bUAZv8-eapSfS-hKVoUG-iKmjBG-cbYeYU-pzW58P-iNpH9k-cb8LYQ-rhwFbz-nE3N2P-hKUZhk-dyR2S9-eSgcRg-hTZDmD-cbXSau-ov1BHP-dqgxB6-7GLbNG-hKUYMH-e7JueS-cbXSeU-aMSetv-hKW5R2-nev3ch-bUx8Q2/">Hubble’s High-Definition Panoramic View of the Andromeda Galaxy</a> by NASA Goddard Space Flight Center under <a href="https://creativecommons.org/licenses/by/2.0/">CC</a>

What’s Wrong with Group Policy

Over the years I have worked with Group Policy in many different ways. My experience ranges from helping an enterprise client establish a brand new set of policies for physical PCs and VDI machines to authoring ADM/ADMX/ADML files. Last year I presented and wrote a very detailed analysis of the impact of Group Policy on […]

Continue Reading · 1
TTTT

Analysis: Require Domain Controller Authentication to Unlock Workstation

Among the many security options that are configurable via Group Policy there is a setting Interactive logon: Require Domain Controller authentication to unlock workstation. For security reasons this is often enabled. Let’s have a closer look at the implications. Those are different from what one might think because the name is a little misleading. (more…)

Continue Reading · 0
New Articles, Tools, Tips and Tricks: Bugs, Annoyances, PowerShell and some other Stuff

New Articles, Tools, Tips and Tricks: Bugs, Annoyances, PowerShell and some other Stuff

Bugs and Annoyances ICA connections initiated over the ICA client object (ICO) SDK fail because 128-bit encryption cannot be enabled. Apparently, setting EncryptionLevelSession does not work. Annoyingly, this bug is more than a year old, was fixed in the ICA client 10.2 and reappeared in the current version 11.0. Bugs like this one are bad […]

Continue Reading · 0

Soup Up Your Terminal Server: Optimizing Explorer’s Network Performance

Update: The ADM file can now be downloaded here. I recently came across a post in the Windows Server Performance Team’s blog that lists several registry values which can be used to tune Explorer’s SMB performance by modifying the following: Searches for Desktop.ini files used for folder customization Periodic refreshes of folder contents Searches for […]

Continue Reading · 10