Microsoft | Office Add-In restrictions via GPO
Microsoft Word/Excel 201X > Misc > Block all unmanaged AddIns Microsoft Word/Excel 201X > Misc > List of managed AddIns Advertisements
Category: windows
Windows 7 | Scheduled Task via GPO | Running without someone is logged on.
Use NT AUTHORITY\SYSTEM as user.
WSUS | Setup error 80070643 + CInstallDriver::PerformSetup
If you got this 2019-05-28 13:20:27 Error MWUSSetup InstallWsus: MWUS Installation Failed (Error 0x80070643: Schwerwiegender Fehler bei der Installation.) 2019-05-28 13:20:27 Error MWUSSetup CInstallDriver::PerformSetup: WSUS installation failed (Error 0x80070643: Schwerwiegender Fehler bei der Installation.) 2019-05-28 13:20:27 Error MWUSSetup CSetupDriver::LaunchSetup: Setup failed (Error 0x80070643: Schwerwiegender Fehler bei der Installation.) 2019-05-28 13:28:25 Error MWUSSetup DoInstall: Wsus setup […]
GPO | rsop.msc | show pulled computer sets as non-admin user
Login as non-admin user XY Right click on %SystemRoot%\system32\mmc.exe -> run as admin Add Resultant Set of Policies (For krauts: Richtlinienergebnissatz) Select computer. Select non-admin user.
Foxit Reader | Shackle the beast via GPO registry settings
Set registry keys via GPO. 1. Disable JavaScript at start HKEY_CURRENT_USER\Software\Foxit Software\Foxit Reader 9.0\Preferences\Others\bEnableJS=0 (REG_SZ) 2. Deny web access for PDF’s at start HKEY_CURRENT_USER\Software\Foxit Software\Foxit Reader 9.0\Preferences\Trust Manager\nSitesAccessRight=1 (REG_SZ) 3. Add Trusted Folders/Sites HKEY_CURRENT_USER\Software\Foxit Software\Foxit Reader 9.0\Preferences\Security\TrustedFolders\csFilePath0=T:\\ (REG_SZ) HKEY_CURRENT_USER\Software\Foxit Software\Foxit Reader 9.0\Preferences\Security\TrustedSites\csHost0=intranet.company.local (REG_SZ) 4. Suppress the ‘Wanna allow anything? Y/N’ message. HKEY_CURRENT_USER\Software\Foxit Software\Foxit Reader 9.0\Preferences\General\bBubbleMsgAffects=0 […]
GPO | WMI filtering for users and/or machines
Setting some user branch rules for specific users on specific machines only. Forget old school loopback mode – use WMI Filtering instead. Create a WMI Rule. Syntax is like select * from Win32_ComputerSystem where ( Name like ‘MACHINE%’ or Name = ‘SERVERX’) and (UserName like ‘mueller%’ or Username = ‘meier’ ) You MUST (!!!) add […]
GPO | A unixers chronicles
1. GPO is not funny. 2. ALWAYS ADD Authenticated Users to the tab Delegation and grant them readable rights. (RETRIEVE the ‘pull GOP’ right!) (Via Delegation – Expanded view) Otherwise the following may happen: You add a user/group to the Security Filtering section, they appear in Delegation with all sufficient rights – but computer says […]
