You did download the incredible MicrosoftEdgeEnterpriseX64.msi but it did return an error? First check C:\Users\All Users\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.log. Maybe you will find something like ‘your organizations group policies prevent this’ or ‘Update check not needed at this time’. Now run Edge and go to edge://policy. It will show you some ‘Microsoft EdgeUpdate Policies’ which you did never […]
Standard stuff: On Server install your printer and printer driver. Then run printmanagament.msc and do Deploy with Group Policy. Have an eye on the drivers section. Know the exact name of your driver, thats important for deploying drivers to local machines. Your brandnew Group Policy should consist of (i) computer >> policies >> windows settings […]
Create the task on a computer. Set the executional principal to ‘NT AUTHORITY\SYSTEM’. Type the string directly or search for ‘SYSTEM’ in the computers local branch. Test it locally. Export the Task as xml. Copy the xml to an accessable network share. Create a powershell script to install the task out of this xml. Example […]
Login as non-admin user XY Right click on %SystemRoot%\system32\mmc.exe -> run as admin Add Resultant Set of Policies (For krauts: Richtlinienergebnissatz) Select computer. Select non-admin user.
Office 20100-16 ADMX Files installieren. GPO erzeugen. GPO editieren. Regeln: Microsoft Office 2010-16 | Sicherheitseinstellungen | VBA für Office-Anwendungen deaktivieren: Deaktiviert [Wenn aktiviert, werden ALLE Makros deaktiviert. Ausnahmen über ‘Vertrauenswürdige Speicherorte’ sind nicht möglich.] Microsoft Office 20100-16 | Sicherheitseinstellungen | Sicherheitscenter | Mischung aus Richtlinien- und Benutzerspeicherorten zulassen: Deaktiviert Microsoft Office 20100-16 | Sicherheitseinstellungen | […]
Setting some user branch rules for specific users on specific machines only. Forget old school loopback mode – use WMI Filtering instead. Create a WMI Rule. Syntax is like select * from Win32_ComputerSystem where ( Name like ‘MACHINE%’ or Name = ‘SERVERX’) and (UserName like ‘mueller%’ or Username = ‘meier’ ) or select * from […]
1. GPO is not funny. 2. ALWAYS ADD Authenticated Users to the tab Delegation and grant them readable rights. (RETRIEVE the ‘pull GOP’ right!) (Via Delegation – Expanded view) Otherwise the following may happen: You add a user/group to the Security Filtering section, they appear in Delegation with all sufficient rights – but computer says […]
bytes and bones 