GPO – make a domain user local administrator of a computer

In this tutorial, I’ll show you how to make a domain user local administrator of a computer or server using Group Policy (GPO). In a previous tutorial, I explain how to do this using restricted groups, which involved creating an Active Directory group, putting the user in that group and then using the group policy, …

Read more



GLPI 10: configure automatic computer inventory with GLPI Agent

Introduction In this tutorial, I will explain how to set up automatic inventory in GLPI 10 with GLPI Agent. Before version 10 of GLPI, you had to go through a plugin (Fusioninventory or OCSInventory) to have automatic inventory in GLPI. Since this functionality is native to GLPI, if you are used to using FusionInventory, you …

Read more



PowerShell: sign scripts

In this tutorial, I will explain how to sign your scripts. Before going into the subject, we will see why signing the scripts, the main reason is security. If your environment (computers + servers) is configured to run only signed scripts and a PowerShell script is launched in a malicious file, it will be neutralized …

Read more



GPO: configure default programs

In this tutorial, I will explain how to configure the default applications (browser, PDF reader…) using a Group Policy (GPO) in an Active Directory environment. Puzzle of IT services, it is the use of default programs for certain types of files (PDF, Images) or even Internet browser, the configuration of such a group strategy allows …

Read more



GPO: schedule the automatic shutdown of computers

In this tutorial, I will walk you through how to schedule computers to automatically shut down using Group Policy. In fact, there is no native functionality in Windows to shut down computers, but we will use Group Policy to deploy a scheduled task to Active Directory domain member computers that will shut them down. Often …

Read more



GPO: force updates from the console

Since Windows 2012, it is possible to force the update of group policies from the Group Policy Management console. It is no longer necessary to go through all the computers and do a gpudapte. To work, the firewall must allow RPC calls to pass. Force update of GPOs remotely 1. Open the Group Policy Management …

Read more



GPO: force DNS computer registration

In this tutorial, I will explain how to force DNS registration of computers by Group Policy (GPO) in an Active Directory environment. Maintaining a clean, up-to-date DNS (Active Directory) zone is not easy, especially with dynamic computer registration. The first step is the activation of automatic cleaning, but it happens that once this is activated, …

Read more



GPO: block programs and prevent software installation – software restriction

In this tutorial, I will explain how by Group Policy (GPO) in an Active Directory environment, block the launch of programs and prevent the installation of certain software with the software restriction policy. By default, if the users are not administrator (local) of the computer, it is not normally possible to install programs, on the …

Read more



GPO: disabled SMBv1

In this tutorial, I will walk you through how to disable SMBv1 support add-on using Group Policy. To disable full SMBv1 support, you must act on the two SMB components which are: The server who is the one who shares The client that allows the use of shared resources. Disabling by group policy is done …

Read more