Category: Group Policy

Determine What Active Directory Organization Units a Group Policy is Linked to with PowerShell

Have you ever noticed that there's not many GPO related PowerShell cmdlets? I started out wanting to know what group policies existed that weren't linked to OU's and added a few other properties to return additional useful information for the ones that were: One of more group policy names can be piped into this function or provided via parameter input. If you want to query all group policy objects, simply pipe Get-GPO -All to it: What's neat to me is being Read more [...]

Oh Where, Oh Where Have My Group Policy Options Gone?

You are unable to find specific GPO options such as “Compatibility View” settings for Internet Explorer. One of the first things to look at is: Where are the policy definitions being retrieved from? The default for an Active Directory environment is from the local machine as shown in the image below: If you’re editing the GPO on a domain controller and have multiple domain controllers that are running different operating system versions, the available options will vary from machine Read more [...]

Adobe Reader 9 update issues on Terminal Server

You’re using group policy to enforce the “Run only approved Windows applications” for a specific group of computers such as terminal servers. After updating Adobe Reader from version 9.0 to 9.2, users receive the message: “This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.” My first thought was "The name of the executable must have changed". A quick check disproved that. It is the same name with both versions: “AcroRd32.exe” Read more [...]