Active Directory: Re-use of the account was blocked by a security policy

In an Active Directory domain, the problem occurred that no new computers could be added to the Active Directory. The error message when adding the client was as follows: In the domain, an Identity Manager was able to create the computer before it was added to the Active Directory (pre-staged) and not only when it was added ... Read more

Server 2016: Group policy for data protection settings

In addition to Windows 10, Windows Server 2016 also transfers a lot of data to Microsoft. In many companies, this chatty behavior of the current Windows versions is probably undesirable. Microsoft seems to be well aware of this and has published extensive documentation on which services transfer data to Microsoft. The documentation is available here: Manage connections ... Read more

Quick & Dirty: Finding invalid and orphaned group policies

I have started to create a small PowerShell script to help detect invalid or orphaned group policies. The first version of the script searches for group policies that are not connected to an OU, have no security filtering or have all GPO settings disabled. I will add more functions to the script in the future and publish it as ... Read more

Outlook 2016: Deactivate buttons / functions

Buttons, functions or button groups can be deactivated with the help of group policies or the registry. This small example shows how to disable the Microsoft Store in Outlook. These two components are required to disable certain buttons or menus: Office 2016 Administrative Template files (ADMX/ADML) Office 2016 Help Files: Office Fluent User Interface Control ... Read more

HowTo: Create group policies yourself (ADMX)

Group policies make an admin's life easier and can be created with little effort. The advantage is obvious: registry settings can be easily distributed to many computers using group policies. The following article contains a short HowTo on how to create group policies yourself using the free "old-school" tool "ADMX-Migrator". Foreword Also for Exchange Server ... Read more

Group policy for deactivating SSL 3.0 and TLS 1.0 (ADM and ADMX)

Configuring SCHANNEL settings for SSL 3.0 and TLS 1.0, for example, is possible under Windows using the registry. For a larger number of servers or computers, however, group policies are more suitable for configuration, so I have created corresponding templates that make the settings in the registry. Foreword The group policies record changes to the registry ... Read more