By default, Active Directory users can log on to any domain-joined computer locally with their accounts. This is because all new users created in Active Directory are automatically added to…
GPO logon scripts allow you to run a BAT or PowerShell script at computer startup or user logon/logoff. In some cases, an administrator wants a particular script (command/program) to be…
You can use Microsoft Office administrative templates (ADMX) to centrally manage the settings of MS Office programs (Word, Excel. Outlook, Visio, PowerPoint, etc.) in the Active Directory domain using Group…
The Group Policy Central Store is located in the SYSVOL directory on the domain controllers, replicated between them, and used to store ADMX/ADML GPO template files used to manage Active…
You can store various useful information in the description of computer objects in Active Directory. For example, information about the computer model, hardware inventory, or the last logged-on username. In…
If you see The sign-in method is not allowed error when trying to logon Windows, it means that the resulting Group Policy settings prevent local sign-in for a current user…
By default, all Windows operating systems automatically update root certificates from the Microsoft website. As part of the Microsoft Trusted Root Certificate Program, the company maintains and publishes root certificates…
In this GPO troubleshooting guide, I’ll try to tell you about the typical reasons why a certain Group Policy Object (GPO) might not apply to an organizational unit (OU) or…
By default, when you install Office 365/Office 2019, all Microsoft Office apps are installed, including Teams (you can install only specific Office apps using the Office Deployment Tool). MS Teams…
The GPResult.exe command-line tool is used to get a Resultant Set of Policy (RSoP) that is applied to a user and/or computer in an Active Directory domain. GPResult allows you…