Search

Monday, July 23, 2012

How to deploy Internet Favorites Link with GPO?

Hi All,

Here is how to deploy the Internet Favorites link with GPO.

1.) Create new GPO Name (Internet Favorites Link)
2.) Right click the Internet Favorites Link and click on Edit.
3.) Go to (User Configuration -->  Policies--> Internet Explorer Maintanance -->URLs--> Favorites and Links)
4.) Check on (Place Favorites and links at the top of the list in the order specified below) and (Only delete the favorites created by the administrator). Add the URL link, which you would like to get it from Client computer.
5.)Add the user into the Security Filtering setting.
6.) Only Enable User Configuration Setting.
7.) When all the configuration is finish, Go to the user that you add into the Security Filtering Group and run gpupdate /force command.
8.) After that run gpresult and check the GPO is apply into the user computer or not.
9.) If the GPO is apply, try to log off and log in.
10.) Open the Internet Explorer, Now you can see URL in the Favorites. 

This is how to configure Internet Favorites Link. Hope you all understand what I mentions. If you have any question about this you can send email to (itman4872@gmail.com).

Thanks for your times.

Myo

How to deploy Restricted Groups with GPO?

Today I gonna show you how to configure restricted groups.

1.) Create new GPO name (Restricted Groups).
2.) Right click Restricted Groups and go to this computer setting path (Computer Configuration --> Policies--> Windows Settings--> Security Settings--> Restricted Groups)
3.) Right click Restricted Groups and choose Add Group
4.) Choose the Group Name (example: Administrator...etc..)
5.) Then you see Configure Membership for Administrators
6.) Within Members of this group--> click Add and type the name you want to add for this group, after that click OK.
7.) Now you see the member the name into the members of this group.
8.) Click OK.
9.) In the Security Filtering setting add the computer name you want to deploy this policy.
10.) When all this finish go to the computer, that you add it in Security Filtering group and run (gpupdate /force) command.
11.) After that run gpresult command and check GPO is apply or not.
12.) If the GPO is apply Log off and Log in.
13.) Then right click (My Computer) and click on Manage.
14.) Expand Local Users and Groups --> choose Groups--> Double click Administrators group. Now you can see the name within the members.

This is how to configure Restricted groups in GPO. Hope you all understand what I mention.

Myo

Saturday, July 21, 2012

How to open Default Application File open with GPO?

Sometimes very easy step is difficult to me. Here is step how to deploy.
In this lesson I gonna show you .txt file is default open with wordpad file. And deploy user with gpo.

1.) Create new GPO name (example: BlaBla)
2.) Leave the GPO and go to regedit. Go to this path (HKEY_CURRENT_USER-->Software-->Windows-->Explorer-->FileExts-->.txt key)
3.) Right click in .txt and choose New --> String Value
4.) Then you can see (New Value #1) from the right side.
5.) Give the name to be (Application)
6.)After you name the string to be Application, then right click the Application string value and click Modify.
7.) Add value date to be wordpad.exe and click OK to close.
8.) When all this finish, Right click the .txt key file and Export into C drive or D drive.
9.) Put this reg file into the user logon script of gpo. add user into security filtering setting.

OK...That it.This is how to deploy default application file open with GPO.

Myo

Wallpaper not show in End User (GPO issue)

1 week ago,  I have got inform by ITSupport. He told me that one of his windows 7 laptop did not get the wallpaper that I deploy with GPO. So I told him to do this step.

1.) Go to command prompt - Run (GPUPDATE /FORCE) command
2.) Then Run (GPRESULT /R) and check the policy name is apply the laptop or not.
3.)  If the GPO is apply, Go to the Regedit, then check on this path (HKEY_CURRENT_USER-->Control Panel --> Desktop)
4.) Within the desktop, Right panel you can see Wallpaper. add the path into the value name of Wallpaper (Note: The value name must be C:\Windows\blabla.jpg
5.) After that put picture into that path C:\Windows\ and restart the laptop.

Then you can see the wallpaper after Windows restart.

Please note: This is fastest way to solved the wallpaper problem. Sometimes, GPO is take time to effect into the user.You can do this step to saved your wallpaper file into the local drive and assign your registry to get file from local drive.


Myo

Access Denied issue when you logon to W2K8 server

Hi All

This week I have met this issue from my office. I search from the net and I saw one of the articles. The articles say that it can fix it by registry. So I try that solution and it works. Here is the issue screen-shot and step below.

Access Denied issue


Step

1.) Type Regedit
2.) Go to (HKEY_LOCAL_MACHINE--> SYSTEM-->CurrentControlSet-->Control-->Services--> TermService)
     Then you can see just like screen-shot below-

3.) ObjectName is LocalSystem. That why you cannot logon to the W2K8 server. You have to changed it just like screen-shot below-

Change the ObjectName to be (NT Authority \NetworkService) and restart your W2K8 server. After restart the server the issue is gone. I can logon to the W2K8 server successfully.

Myo