How to deploy Internet Favorites Link with GPO?

Hi All,

Here is how to deploy the Internet Favorites link with GPO.

1.) Create new GPO Name (Internet Favorites Link)
2.) Right click the Internet Favorites Link and click on Edit.
3.) Go to (User Configuration -->  Policies--> Internet Explorer Maintanance -->URLs--> Favorites and Links)
4.) Check on (Place Favorites and links at the top of the list in the order specified below) and (Only delete the favorites created by the administrator). Add the URL link, which you would like to get it from Client computer.
5.)Add the user into the Security Filtering setting.
6.) Only Enable User Configuration Setting.
7.) When all the configuration is finish, Go to the user that you add into the Security Filtering Group and run gpupdate /force command.
8.) After that run gpresult and check the GPO is apply into the user computer or not.
9.) If the GPO is apply, try to log off and log in.
10.) Open the Internet Explorer, Now you can see URL in the Favorites. 

This is how to configure Internet Favorites Link. Hope you all understand what I mentions. If you have any question about this you can send email to (itman4872@gmail.com).

Thanks for your times.

Myo

How to deploy Restricted Groups with GPO?

Today I gonna show you how to configure restricted groups.

1.) Create new GPO name (Restricted Groups).
2.) Right click Restricted Groups and go to this computer setting path (Computer Configuration --> Policies--> Windows Settings--> Security Settings--> Restricted Groups)
3.) Right click Restricted Groups and choose Add Group
4.) Choose the Group Name (example: Administrator...etc..)
5.) Then you see Configure Membership for Administrators
6.) Within Members of this group--> click Add and type the name you want to add for this group, after that click OK.
7.) Now you see the member the name into the members of this group.
8.) Click OK.
9.) In the Security Filtering setting add the computer name you want to deploy this policy.
10.) When all this finish go to the computer, that you add it in Security Filtering group and run (gpupdate /force) command.
11.) After that run gpresult command and check GPO is apply or not.
12.) If the GPO is apply Log off and Log in.
13.) Then right click (My Computer) and click on Manage.
14.) Expand Local Users and Groups --> choose Groups--> Double click Administrators group. Now you can see the name within the members.

This is how to configure Restricted groups in GPO. Hope you all understand what I mention.

Myo

How to open Default Application File open with GPO?

Sometimes very easy step is difficult to me. Here is step how to deploy.
In this lesson I gonna show you .txt file is default open with wordpad file. And deploy user with gpo.

1.) Create new GPO name (example: BlaBla)
2.) Leave the GPO and go to regedit. Go to this path (HKEY_CURRENT_USER-->Software-->Windows-->Explorer-->FileExts-->.txt key)
3.) Right click in .txt and choose New --> String Value
4.) Then you can see (New Value #1) from the right side.
5.) Give the name to be (Application)
6.)After you name the string to be Application, then right click the Application string value and click Modify.
7.) Add value date to be wordpad.exe and click OK to close.
8.) When all this finish, Right click the .txt key file and Export into C drive or D drive.
9.) Put this reg file into the user logon script of gpo. add user into security filtering setting.

OK...That it.This is how to deploy default application file open with GPO.

Myo

Wallpaper not show in End User (GPO issue)

1 week ago,  I have got inform by ITSupport. He told me that one of his windows 7 laptop did not get the wallpaper that I deploy with GPO. So I told him to do this step.

1.) Go to command prompt - Run (GPUPDATE /FORCE) command
2.) Then Run (GPRESULT /R) and check the policy name is apply the laptop or not.
3.)  If the GPO is apply, Go to the Regedit, then check on this path (HKEY_CURRENT_USER-->Control Panel --> Desktop)
4.) Within the desktop, Right panel you can see Wallpaper. add the path into the value name of Wallpaper (Note: The value name must be C:\Windows\blabla.jpg
5.) After that put picture into that path C:\Windows\ and restart the laptop.

Then you can see the wallpaper after Windows restart.

Please note: This is fastest way to solved the wallpaper problem. Sometimes, GPO is take time to effect into the user.You can do this step to saved your wallpaper file into the local drive and assign your registry to get file from local drive.


Myo

Access Denied issue when you logon to W2K8 server

Hi All

This week I have met this issue from my office. I search from the net and I saw one of the articles. The articles say that it can fix it by registry. So I try that solution and it works. Here is the issue screen-shot and step below.

Access Denied issue

Step

1.) Type Regedit

2.) Go to (HKEY_LOCAL_MACHINE--> SYSTEM-->CurrentControlSet-->Control-->Services--> TermService)

     Then you can see just like screen-shot below-

3.) ObjectName is LocalSystem. That why you cannot logon to the W2K8 server. You have to changed it just like screen-shot below-

Change the ObjectName to be (NT Authority \NetworkService) and restart your W2K8 server. After restart the server the issue is gone. I can logon to the W2K8 server successfully.

Myo

How to check AD Replication in Windows 2008?

AD Replication is critical issue in large environments. Here is command to check AD Replication.

1. net share servername (Check SYSVOL and NETLOGON is replicate to the server, Note: It is important)
2. repadmin  /showreps servername
3. dcdiag /test:Replications

After that Go to the Active Directory Sites and Services --> Expand Server --> Right Click NTDS Settings --> All Tasks --> Check Replication Topology

Note: Check Replication Topology because It will show you the server, your server is replicate from.

You can also check your Replication partner within NTDS settings.

Myo

Account Locked Out Issue

In Large Domain Environments, Account Locked Out issue is big issue. Because It make user to automatically locked out after 15 or 20 minutes.

When Account Locked out happen?

1. User is change the new password after 30 or 60 days.  (Example: Company Policy)
2. Using Mobile Device (example: password not synchronize immediately)
3. One of the Computer is having a virus and attack to another good computer, log-in as Bad Password.

How to fix this Account Locked Out Issue?

Go to this below Microsoft Website and Download Account Locked Out. From my environment, This tools is help me alot.

Account Locked Out Checking Tools From Microsoft

Here is logo of Account Locked Out Tools



If you have any question about this please let me know.









Myo

How To Configure Power Saving Policy in Windows XP?

This is way to make Power Saving Policy in Windows XP Environment. If you have any question about this, You can send email.

1. Create 2 GPO Policy. Power Saving Policy for Win XP need 2 Policy. 1 for Computer setting and another one for User Setting. (Example: Test-Power_Saving_Policy (Computer Setting) and Test-Power_Saving_Policy (User Setting)
2. Create .bat file script for User Setting. You can create .bat file script just like this example below

Example:

\\servername\netlogon\powercfg.exe /change "always on" /monitor-timeout-ac 3
\\servername\netlogon\powercfg.exe /change "always on" /monitor-timeout-dc 3

above this script must be apply it to User Setting of Logon.

3. For the Computer Setting Policy, you have to set 2 permission for Registry and 1 permission for File System.
    Go to Computer setting --> Open Windows settings --> Expand Security settings--> and then you can see
    Registry and File System.
    Right Click Registry --> Choose Add Key --> Select this 2 file need to add in Registry.
 
   Machine\Software\Microsoft\Windows\Current Version\Control Folder\PowerCfg
   Users\.Default\Control Panel\PowerCfg
 
   When you add this above registry, there a security permission prompted and request you to add User Name and Computer Name. Add User Name and Computer Name, after that set then to full control permission for this User and Computer.
   For the File System Setting, You have to Right Click File System --> Add File. Then choose powercfg.cpl

   %SystemRoot%\System32\powercfg.cpl
   When you add this above registry, there a security permission prompted and request you to add User Name and Computer Name. Add User Name and Computer Name, after that set then to Deny permission for this User and Computer.

Note: I have set deny powercfg.cpl because I don't allow end user to change Power Setting.

So That All. This is how to configure Power Saving setting in Windows XP Environment.

Myo