List of different Group Policy Templates (Updated)

Gruppenrichtlinenkonsole mit Importierten Administrativen Vorlagen

Active Directory group policies, also called Group Policy Object (GPO), are one of my core topics. I have a lot to do with this in various projects and as a Microsoft trainer. As a result, I have accumulated a number of templates and links. This link collection should make your search a little easier. Only templates of the respective manufacturers or projects are listed here. I have deliberately avoided third-party guidelines.

Read more

German Federal Office for Information Security (German BSI) security recommendations for Windows 10

20210511 Screenshot BSI German Federal Office for Information Security (German BSI) security recommendations for Windows 10 2

The German Federal Office for Information Security (BSI) has published new documents on Microsoft Windows 10 and how to secure it. I looked at the BSI security recommendations for Windows 10 before I wanted to report on them. The background to this is that in the past, publications in this direction were sometimes more than outdated when they were published or they were very superficial.

Read more

Properly secure and document group policies

GPOBACKUP German Federal Office for Information Security (German BSI) security recommendations for Windows 10 4

It’s been some time since I started working on the first basic version of the script in August 2014, and posted about it on CONET’s blog. This first version came to just 6 lines of code without the header. Since then a lot has happened and the script has grown in the TechNet Gallery. Time for a new article about the script and its function.

Read more

New version of get-GPOBackup

Neue Version von get-GPObackup

It has once again reached me a feature desire, and here is the implementation. With version 1.58 the group policy templates can be saved from the central store. This is especially good when importing new templates that may be buggy. This even happens to Microsoft with the German translations for Windows 10 times quite often. If you don’t know the script yet, I recommend having a look at the article: “Gruppenrichtlinien richtig sichern und dokumentieren“.

Read more

Administrative templates in Intune – incl. list

Intune ADM Template

In January 2019 I reported about the preview of the administrative templates in Intune. Now it’s time to see what happened. Meanwhile, the function is no longer in the preview phase and it has grown too.

Read more

Using and Auditing PowerShell Scripts with Microsoft Local Administrator Password Solution (LAPS)

A screenshot of a social media post

This article was first published in German on June 04, 2019, on Infrastrukturhelden.de. The translation of this article was published on the 25th July 2019 at LinkedIn. Please read the article on LinkedIn.

Local Administrator Password Solution (LAPS)

041917 0532 LocalAdmini5 German Federal Office for Information Security (German BSI) security recommendations for Windows 10 10

In the past, a company-specific standard was usually always used for local administrator passwords. But what do you do if an employee who knows the default password leaves the company?

Right, it should be changed. In the past, Group Policies (GPO) were often used for this, even if the password was in clear text in SysVol. This was fortunately stopped by Microsoft. What other solutions are available? In practice I have seen VBS or PowerShell scripts, the good ones have random passwords, the bad ones only a standard.

But isn’t there a well designed solution from Microsoft? Yes, there is, Local Administrator Password Solution (LAPS).

Read more