Group Policy, Global Policy, Desktop Policy, Server Policy

Ok, add one more Murray's Policy Group, I have been known to lock down a few systems in the name of "Stop making system changes".

This section is all about you and your internal policies. You don't have to touch your computer policy at all but if you do it's a good idea to follow some good advice from time to time. Your IT Admin should be your first point of contact. If you don't have one or can't get past the voice mail send me a note and I'll publish a few policies based on your internal policy needs or requirements. HIPPA users welcome to apply.

First of all, if you export your policy before you start editing it you'll feel much better.

Then the one command you must always remember so you don't wonder why things aren't changing is the forceupdate group policy. Ready?

The Program:

  • gpedit.msc
  • gpupdate.exe

The Location:

  • Windir system32 (%windir%\system32)

The Commands:

  • /target: [computer | user]
  • /force
  • /wait: timevalue
  • /logoff
  • /boot
  • /sync

Now that you are armed with the commands why not disable the control panel on your kids system remotely.

No, I'm kidding but if you have office workers that just can't seem to stay out of system settings you can do just that with group policies or local policies.

Keep your USB Stick handy so you can backup before your gpupdate.exe /force that policy on a computer. 

Look for articles here about what good settings you can use to help protect your systems. If you have community shared computers it is strongly suggested you learn how to change the policies on that system or the controller if on a domain controled network.

 

 

Policies are often times overlooked. I know 9 out of 10 times when I look for anything other than a standard policy I'm not amazed when I see nothing. It isn't important is what I typically hear. We don't do that and that will never happen. I think after 20 years of hearing the same old same old I would stop asking them about Computer and Network Policies and just lock everything down.