- Loopback Policies for Managing Terminal Services
- Customising Windows Firewall
- Download Group Policy ADM Files (reference from here)
- Microsoft's Group Policy FAQ
- Group Policy Resource Centre (gpanswers.com)
- gpoguy.com
- Group Policy Health cmdlet shows group policy processing status of remote systems at a glance using a red-green colour scheme. It works on a single machine, all machines in an OU, or all machines in the domain
- The following entry in the [strings] section is too long and has been truncated error message when you try to modify or to view GPOs in Windows Server 2003, Windows XP Professional, or Windows 2000
- How to reset user rights in the Default Domain Controllers Group Policy object - I couldn't browse to the SYSVOL share (even from the domain controller), in my case all I had to do was edit the GptTmpl.ini file adjusting the Se[Deny]NetworkLogonRight and Se[Deny]InteractiveLogonRight fields, increase the group policy version in Gpt.ini and then gpupdate /force.
- Using Restricted Groups - to eg. manage the "Administrators" group on all PCs
- WMI filters for Group Policy
- GPOtool from the Server 2003 Resource Kit (also available in the Windows 2000 Server Resource Kit) performs consistency checks to make sure that there is consistency between the GPT (Group Policy Template - stored in SYSVOL) and the GPC (Group Policy Container - the record stored in AD)
Default (common for any installation) policies:
- {31B2F340-016D-11D2-945F-00C04FB984F9} - The domain default group policy
- {6AC1786C-016F-11D2-945F-00C04fB984F9} - The "Domain controllers" default group policy
You can also write a script to List all Policies and their GUIDs
Locking Down Access
Learning about Group Policies
Microsoft recommends the following links:
