By default, only users with administrative privileges can log in to a Remote Desktop session. However, there are often...
Tag Archive for: group policy
4sysops - The online community for SysAdmins and DevOps
Manage enhanced security mode in Microsoft Edge using Group Policy

Enhanced security mode (ESM) introduced with Edge 111 is designed to protect the browser against attacks that manipulate data...
Resultant Set of Policy (RSoP), Group Policy Results, and Group Policy Modeling

The Resultant Set of Policy (RSOP) snap-in of the Microsoft Management Console (MCC) helps troubleshoot Group Policy settings. Group...
Find enabled local Group Policy settings with rsop.msc and PowerShell

When it comes to GPO troubleshooting, you might want to find settings that are configured by local Group Policy....
Configure password managers in Chrome, Edge, and Firefox using Group Policy

All modern web browsers offer password managers that allow users to save website login credentials and automatically fill them...
Skip welcome page in Chrome, Edge and Firefox using Group Policy

When a user starts a web browser for the first time on a computer, he is presented with a...
Location-based printing for Active Directory sites

With a modern hybrid workforce, admins must take a user's location into account when configuring printing solutions. Location-based printing...
Migrating GPOs to MDM with Intune’s Group Policy Analytics

Microsoft's modern management is based on cloud services, such as Autopilot, Azure Active Directory, and Intune. The latter uses...
Auditing and restricting NTLM authentication using Group Policy

NTLM is an insecure authentication protocol that is still found in many environments. Using Group Policy and effective logging,...
Update ADMX templates automatically with EvergreenAdmx

Group Policy admins have to deal with a lot of different ADMX templates. These templates are not limited to...
How to install Group Policy ADMX templates for OneDrive

When companies use OneDrive, they usually want to control its use via Group Policy to prevent data loss or...
Set Chrome, Firefox and Edge as default mail client (mailto handlers)

To set Chrome, Edge, or Firefox as default mail client for mailto links (mailto handlers) requires several steps. In...
Restrict logon time for Active Directory users

You can restrict logon times for Active Directory users for specific days or hours. This can be useful to...
Show or hide users on the logon screen with Group Policy

By default, the Windows logon screen displays some information about the current user as well as accounts that have...
Recommended security settings and new group policies for Microsoft Edge (from 107 on)

Microsoft last updated its security baseline for Edge browser 107, but it is still valid for the current versions....
Download and install ADMX templates for Microsoft Edge

If you take a look at the group policy settings in Windows 11 or the separately available ADMX files,...
Controlled folder access: Configure ransomware protection with Group Policy and PowerShell

Controlled folder access prevents suspicious programs from modifying or creating files in protected directories, such as Documents, Pictures, Favorites,...
FSLogix VHDX compaction: Resize virtual disks

The new FSLogix version, which was released in October, introduces a long-awaited feature: VHDX compaction. FSLogix is a standalone...
Block notifications in Chrome, Edge, and Firefox

Many websites ask users whether they want to receive notifications. In managed environments, this feature can be disabled via...
Disable UAC with Group Policy and set PIN in Windows Hello

User Account Control helps to implement proper permission levels for users accessing systems. Instead of needing administrator privileges, UAC...