GPO | Gruppenrichtlinien – www.butsch.ch

Azure CRUNCH Exchange 2007 Exchange 2010 Exchange 2013 Exchange 2016 Exchange 2019 GPO | Gruppenrichtlinien M365 - Exchange Online M365,AZURE,INTUNE Microsoft Exchange Microsoft Server OS

Active Directory accounts with ADMINSholder/adminCount flag | No syncback from Azure, ms-ds-consistencyGuid

14.06.2023 admin

english, Management summary To gain a better understanding of the ADMINSholder/adminCount attribute, we recommend referring to the provided blog posts, which shed light on the impact of this flag, particularly regarding ActiveSync and GPO. This attribute poses a challenge in the synchronization process of the Synchronization Service Manager (Microsoft Azure AD Connect Synchronization Services) as […]

CRUNCH Deployment GPO | Gruppenrichtlinien Intunes W10

IE11 GPO Settings, PROXY Explained F5-F8, Proxy settings still used in 2023 by system account

15.05.2023 admin

This may be useful in 2023 because SYSTEM (The PC itself) still often uses PROXY and IE Settings. Often on New environment and DC or GPO Console you can’t see those old settings but sometimes they are still affective. Check out our other IE11 LINKS: https://www.butsch.ch/post/ie11-ieak-11-setup-9-pre-deployment-patches-2b-1-hotfix/ htps://www.butsch.ch/post/internet-explorer-9-11-gpo-old-ie9-not-visible-wmi-checks/ IE11 GPO Settings, PROXY Explained F5-F8 IE11 has […]

GPO | Gruppenrichtlinien Hotfixes, Updates

09/2020 Patchday, KB4577015, breaks MMC (wsecedit.dll ) console for local security and GPO SRV 2016

28.09.2020 admin

ERROR: wsecedit.dll, MMC, Local Security Policy, Security Options > “MMC has detected and error in a snap-in” Update 2020-09 Cumulative Update (KB4577015) bug mit GPO/MMC. “Next steps: We are working on a resolution and will provide an update in an upcoming release.” Macht ein bug bei Server 2016 z.B. MMC-Konsole. Ich würde daher DC […]

Deployment GPO | Gruppenrichtlinien WMI

WMI Filter for GPO WIN 10 and 1709, 1803, 1809, 1903, 1909, 2004, 20XX, 21XX, 22XX

30.07.2020 admin

Here is how to catch different Windows 10 OS release within WMI for GPO targeting We used this the first time during a 1709 > 1909 Migration where we wanted to push customer startlayout.xml (Different new syntax and command for W10 1909) with GPO ONLY to the 1909 clients. SBS/KMU seamless upgrades but often forget […]

CRUNCH GPO | Gruppenrichtlinien

GPO, Group Policy, Extra Registry Settings, Display names for some settings cannot be found

27.03.2019 admin

GPO error you see in Group Policy Console after you migrated/imported GPO from another domain or location: Extra Registry Settings: Display names for some settings cannot be found. You might be able to resolve this issue by updating the .ADM files used by Group Policy Management. Cause: This is a leftover of some old GPO […]

Exchange 2007 Exchange 2010 Exchange 2013 Exchange 2016 Exchange 2019 GPO | Gruppenrichtlinien M365 - Exchange Online Microsoft Exchange Outlook W10

Turn of Autodiscover warning box agree Outlook.exe with GPO

05.02.2019 admin

How to turn off Autodiscover Warning in Outlook 2010/2013/2016/2019 Warnung: Das Konto wurde fuer die Einstellung auf die Website umgeleitet https://support.microsoft.com/en-us/help/2480582/how-to-suppress-the-autodiscover-redirect-warning-in-outlook A little bit more explained than in the Microsoft KB and with a check THAT if you ONLY set the Registry key if the OFFICE Version is installed. During Migrations you could otherwise run […]

Deployment GPO | Gruppenrichtlinien

IE11 leak in jscript.dll CVE-2018-8653 XMAS Hotfix

22.12.2018 admin

Microsoft Internet Explorer scripting engine JScript memory corruption vulnerability The Leak was patched back in 2015 for jscript9.dll which is by default used by IE11. We HIGHLY recommend this patch to urgently get installed intermin beside regular patch days and before XMAS. Esp. In Europe (Germany, Switzerland, EMEA) we have has a large amount of […]

Deployment GPO | Gruppenrichtlinien Hotfixes, Updates Scripting W10

Samsung SSD + Bitlocker leak

08.11.2018 admin

Check if you are affected by the 11/2018 SSD Bitlocker Leak. ADV180028 | Guidance for configuring BitLocker to enforce software encryption Security Advisory, Published: 06.11.2018 Producer: Samsung and Crucial Affected models proof: Crucial MX100, MX200, MX300, Samsung EVO 840, 850, Samsung External USB T3/T5 There is a leak with certain SSD Hard disk (Solid-state) together […]

Deployment GPO | Gruppenrichtlinien

GPO, W10, CSE_NOBACKGROUND and CSE_Drives GPO, English German mix how to fix RIGHT way

31.07.2018 admin

There have been some WRONG Blogs about correcting this issue with wrong GPO / Gruppenrichtlinie Language / Sprach-Files. Here is the error you see. Folgende Fehler sind aufgetreten: Das Richtlinienpräsentationselement “CSE_NOBACKGROUND” auf das in Präsentation “CSE_Drives” verwiesen wird, ist nicht vorhanden. Datei \\SERVER045.bsb.local\SysVol\bmw.local\Policies\PolicyDefinitions\GroupPolicyPreferences.admx, Zeile 334, Spalte 70 Please do a COPY and DUMP of the […]

Deployment GPO | Gruppenrichtlinien W10

EFAIL and Microsoft GPO Policy Chaos

16.05.2018 admin

Problem: There is a man-in-the-middle leak where you can capture an E-Mail (Only if you have access to the flow) attach a content And if the CLIENT does autoload (When you open the E-Mail) external pictures get content. Now this would not be too complicated if there where No newsletters where people store large pictures […]

Deployment GPO | Gruppenrichtlinien Intunes Microsoft SCCM,MEM,MDT W10

W10 _German_Deutsch WIN 10 ENT how to add English as display language with DISM

19.10.2015 admin

Enhance your W10 or W11 migration experience with this insightful solution. When transitioning from Windows 7 to Windows 10, especially in non-international companies within the DACH region, having a W10 Admin machine becomes essential, especially if your domain controllers are still operating on 2012R2. Encounter an issue where, on a German Windows 10 system, RSAT […]

GPO | Gruppenrichtlinien Microsoft Server OS Server 2008 R2 Server 2012 R2 Server 2016 W10

Fine grained Password Policy on 2012R2 made easy with ADAC

08.07.2015 admin

ADAC = NOT Deutscher Pannendienst 😉 Fine grained Password Policy in 2013 R2 Domain Active Directory, Error 4625 event Sometimes you need accounts TO None expire or not getting Locked out. We all now it’s stupid in security terms but if the software has a bug and locks the account you have to hurry. Search […]

Deployment GPO | Gruppenrichtlinien Scripting W10

W7 client, Error 2221 with Logonscripts

12.05.2015 admin

System Error 2221 has occurred in Batch Logonscripts If you run a logon script on Windows 7 you get an error 2221 when the client tries to mount a network drive. We have also seeing this appear in Outllook.exe with Exchange Server. User suddenly can’t connect to network share Name Resolution is running You can […]

Exchange 2007 Exchange 2010 GPO | Gruppenrichtlinien Outlook

WINMAIL.DAT (Exchange 2007/2010) Outlook 2010

11.12.2013 admin

RTF = Rich Text Format (The text/enriched MIME Content-type) http://tools.ietf.org/html/rfc1563 http://msdn.microsoft.com/en-us/library/office/aa140284(v=office.10).aspx http://en.wikipedia.org/wiki/Transport_Neutral_Encapsulation_Format Transport Neutral Encapsulation Format or TNEF is a proprietary email attachment format used by Microsoft Outlook and Microsoft Exchange Server. An attached file with TNEF encoding is most often named winmail.dat or win.dat, and has a MIME type of Application/MS-TNEF. The official […]

GPO | Gruppenrichtlinien Scripting W10

Valid patterns and verification of Internet Zone Mappings in IE8/IE9 and W7

23.05.2013 admin

Microsoft has added some new options in the Server 2008R2 GPO’s for Windows 7 to handle Intranet or Proxy bypass Sites automatic as Local Intranet. But still there is lot of work and trouble. You may have to fix Attachment User Policy for .EXE/.CHM Files and also as usual the Intranet Zone Files. You can […]