Group Policy

Howto: Do not display the name of the user who has locked a Windows computer or server

by File in: Group Policy, registry, Windows

Normally when a Windows workstation or server is locked, you’ll see something similar to the following Windows Security message:   This computer is in use and has been locked.   Only DOMAIN\USER (user name) or an administrator can unlock this computer.   To not show the name of the user who has locked a computer, the […]

Fix: The error returned when trying to retrieve these settings from the local security policy database (%windir%\security\database\secedit.sdb) was: The parameter is incorrect

by File in: Group Policy

Howto fix error when opening Windows Server 2003 Local Security Policy: The Group Policy security settings that apply to this machine could not be determined. The error returned when trying to retrieve these settings from the local security policy database (%windir%\security\database\secedit.sdb) was: The parameter is incorrect. All local security settings will be displayed, but no […]

Windows XP firewall service is enabled after installing XP SP3 – even if it was previously disabled

by File in: Windows

If Windows XP SP2 firewall service is set to manual or disabled when Windows XP SP3 is applied, the Windows Firewall/Internet Connection Sharing (ICS) service and Security Cetner service will be changed to automatic startup.  This behavior is by design, for the purpose of increasing the security of Windows XP. This setting will remain in effect […]

Microsoft Advanced Group Policy Management (AGPM) 3.0 has been RTMd – and why you should care

by File in: Group Policy

The Microsoft Group Policy Team Blog has announced that Microsoft Advanced Group Policy Management (AGPM) 3.0 has been RTM’d. Advanced Group Policy Management (AGPM) helps you better manage Group Policy objects (GPOs) in your environment by providing change control, offline editing, and role-based delegation. AGPM is a key component of the Microsoft Desktop Optimization Pack […]

Microsoft has finally fixed their methodology for disabling Autorun on Windows operating systems

by File in: Windows

Technet article 91525 describes a registry key that can be set to disable the Autorun feature in Windows operating systems.  The registry key is NoDriveTypeAutoRun, which can be found at HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer This key disables the Autoplay feature on all drives of the type specified.  Autoplay begins reading from a drive as soon as media is inserted […]

Blocking Apple software updates through Group Policy due to Safari for Windows security concerns

by File in: Group Policy

I’m a big fan of keeping my software applications up to date on client machines, but I hate the fact that Apple is trying to push new Safari installations whenever users update iTunes on my Windows machines.  I found Dan’s blog post specifics on how to edit the appropriate registry keys to forbid automatic installations of Apple software, […]

Microsoft’s Group Policy Documentation Survival Guide

by File in: Group Policy

The Technet Group Policy Documentation Survival Guide contains all the information you will need to evaluate, plan, deploy, maintain, or support Group Policy. The guide is available in HTML and PDF formats.  Note that this guide contains links to where to find the pertinent information – not the information itself.  Microsoft does a pretty good spreading […]

Howto: Disable Windows Simple File Sharing via the Registry and Local Security Policy

by File in: howto

Microsoft KB 307874 describes how to disable Windows XP Professional’s simple file sharing. Why would you want to disable simple file sharing on your workstation? The KB explains: By default, simple file sharing is enabled on a Microsoft Windows XP-based computer if the computer is not a member of a domain. With simple file sharing, […]