GPO: block programs and prevent software installation – software restriction

In this tutorial, I will explain how by Group Policy (GPO) in an Active Directory environment, block the launch of programs and prevent the installation of certain software with the software restriction policy. By default, if the users are not administrator (local) of the computer, it is not normally possible to install programs, on the …

Read more



GPO: disabled SMBv1

In this tutorial, I will walk you through how to disable SMBv1 support add-on using Group Policy. To disable full SMBv1 support, you must act on the two SMB components which are: The server who is the one who shares The client that allows the use of shared resources. Disabling by group policy is done …

Read more



Default Domain Policy: Remove Remote Installation Services settings

In this “troubleshooting”, I will explain how to remove the Remote Installation Services settings that are configured on the Default Domain Policy. On Active Directory domains, which were created with an older version of Windows Server (2003), User settings are configured (Policies / Windows Settings / Remote Installation Services / Client Installation Wizard Options). Custom …

Read more



GPO for Firefox

paramètres disponible

For companies that use firefox as a browser, it was difficult to control due to the lack of admx file and the implementation of policies required scripts to copy the settings file. Since May 2018, firefox has officially offered ADMX files in order to be able to set up group policies (GPO) to configure Firefox …

Read more



Active Directory: secure passwords with Lithnet Password Protection for Active Directory

In this tutorial, I will tell you how to harden password security with Lithnet Password Protection for Active Directory. Lithnet Password Protection for Active Directory is a free utility that installs on domain controllers, which will allow us to increase password security with: Create a forbidden password dictionary, also taking into account the replacement of …

Read more



KB5005033: Allow non-administrators to install printer drivers

To fight against the flaws that affect the print spooler on Windows, the KB5005033 of August 2021, modifies the behavior of Windows 10 by requesting the administrator rights for the installation and the update of the print drivers. The changes proposed in this article bypass the KB related blockage, which again exposes your system. It …

Read more



GPO: installation of definitions for Office

Through this article, I will show you how to set up the necessary files to set up Office 2016 using GPOs in an Active Directory environment. It is possible to add settings to the Group Policy system by adding ADMX and ADML files. The explanations below can be applied to any definitions you may download …

Read more



Active Directory: Copy Group Policy – GPO

In this tutorial, I will explain how to copy / duplicate / clone a Group Policy (GPO). To do this, you have two solutions, either go through the GUI and the Group Policy Management console or use PowerShell. I’ll show you both, then it’s up to you to choose which one is right for you. …

Read more



Update Group Policy Definitions – ADMX

In this tutorial, I’ll explain why and how to update Group Policy Definitions (GPOs) in an Active Directory environment. Before explaining how to do this, we will see why to update the files, for understanding I will start from an example. You are in an Active Directory environment which is composed of 2 Windows Server …

Read more