GPO | Gruppenrichtlinien Archives

Deployment GPO | Gruppenrichtlinien Intunes Scripting SECURITY

Proxy settings der Cryptography API bei Zertifikatswiderrufslisten (CRL) von einem CRL-Verteilungspunkt

23.04.2024 admin

Dieser Artikel zielt darauf ab, den Prozess zu erläutern, den die Crypto API durchläuft, um erfolgreich eine HTTP-basierte URL für den CRL-Verteilungspunkt herunterzuladen. Er dient auch der Fehlerbehebung in Situationen, die mit der Netzwerkrückgewinnung von CRLs verbunden sind. Zusätzlich wird unser kostenloses Tool, crlcheck.exe, erwähnt, das dazu beitragen soll, komplexe Probleme effektiver zu lösen. […]

CRUNCH ENS | Endpoint Security FW Fortigate FW Sophos GPO | Gruppenrichtlinien Intunes M365 - Exchange Online M365,AZURE,INTUNE Mcafee/Trellix Microsoft SCCM,MEM,MDT Microsoft Server OS Scripting Tools we made Uncategorized W10 WSUS

CRL check, Zertifikatsperrlisten Software, Certificate Revocation List Check Tool zum suchen aller geblockten CRL in Firmenumgebungen, crlcheck.exe

06.04.2024 admin

Mit diesem Tool findet man schnell und einfach alle verwendeten CRL eines clients und kann prüfen ob der client diese erreicht. In den vergangenen Jahren habe ich persönlich miterlebt, wie die Zertifikatssperrung auf Windows-Systemen oft unterschätzt wird, selbst in großen Unternehmen. Dieses Problem beeinträchtigt sowohl Client- als auch Server-Systeme erheblich, wenn es nicht korrekt […]

Azure CRUNCH Exchange 2007 Exchange 2010 Exchange 2013 Exchange 2016 Exchange 2019 GPO | Gruppenrichtlinien M365 - Exchange Online M365,AZURE,INTUNE Microsoft Exchange Microsoft Server OS

Active Directory accounts with ADMINSholder/adminCount flag | No syncback from Azure, ms-ds-consistencyGuid

14.06.2023 admin

english, Management summary To gain a better understanding of the ADMINSholder/adminCount attribute, we recommend referring to the provided blog posts, which shed light on the impact of this flag, particularly regarding ActiveSync and GPO. This attribute poses a challenge in the synchronization process of the Synchronization Service Manager (Microsoft Azure AD Connect Synchronization Services) as […]

CRUNCH Deployment GPO | Gruppenrichtlinien Intunes W10

IE11 GPO Settings, PROXY Explained F5-F8, Proxy settings still used in 2023 by system account

15.05.2023 admin

This may be useful in 2023 because SYSTEM (The PC itself) still often uses PROXY and IE Settings. Often on New environment and DC or GPO Console you can’t see those old settings but sometimes they are still affective. Check out our other IE11 LINKS: https://www.butsch.ch/post/ie11-ieak-11-setup-9-pre-deployment-patches-2b-1-hotfix/ htps://www.butsch.ch/post/internet-explorer-9-11-gpo-old-ie9-not-visible-wmi-checks/ IE11 GPO Settings, PROXY Explained F5-F8 IE11 has […]

GPO | Gruppenrichtlinien Hotfixes, Updates

09/2020 Patchday, KB4577015, breaks MMC (wsecedit.dll ) console for local security and GPO SRV 2016

28.09.2020 admin

ERROR: wsecedit.dll, MMC, Local Security Policy, Security Options > “MMC has detected and error in a snap-in” Update 2020-09 Cumulative Update (KB4577015) bug mit GPO/MMC. “Next steps: We are working on a resolution and will provide an update in an upcoming release.” Macht ein bug bei Server 2016 z.B. MMC-Konsole. Ich würde daher DC […]

Deployment GPO | Gruppenrichtlinien WMI

WMI Filter for GPO WIN 10 and 1709, 1803, 1809, 1903, 1909, 2004, 20XX, 21XX, 22XX

30.07.2020 admin

Here is how to catch different Windows 10 OS release within WMI for GPO targeting We used this the first time during a 1709 > 1909 Migration where we wanted to push customer startlayout.xml (Different new syntax and command for W10 1909) with GPO ONLY to the 1909 clients. SBS/KMU seamless upgrades but often forget […]

CRUNCH GPO | Gruppenrichtlinien

GPO, Group Policy, Extra Registry Settings, Display names for some settings cannot be found

27.03.2019 admin

GPO error you see in Group Policy Console after you migrated/imported GPO from another domain or location: Extra Registry Settings: Display names for some settings cannot be found. You might be able to resolve this issue by updating the .ADM files used by Group Policy Management. Cause: This is a leftover of some old GPO […]

Exchange 2007 Exchange 2010 Exchange 2013 Exchange 2016 Exchange 2019 GPO | Gruppenrichtlinien M365 - Exchange Online Microsoft Exchange Outlook W10

Turn of Autodiscover warning box agree Outlook.exe with GPO

05.02.2019 admin

How to turn off Autodiscover Warning in Outlook 2010/2013/2016/2019 Warnung: Das Konto wurde fuer die Einstellung auf die Website umgeleitet https://support.microsoft.com/en-us/help/2480582/how-to-suppress-the-autodiscover-redirect-warning-in-outlook A little bit more explained than in the Microsoft KB and with a check THAT if you ONLY set the Registry key if the OFFICE Version is installed. During Migrations you could otherwise run […]

Deployment GPO | Gruppenrichtlinien

IE11 leak in jscript.dll CVE-2018-8653 XMAS Hotfix

22.12.2018 admin

Microsoft Internet Explorer scripting engine JScript memory corruption vulnerability The Leak was patched back in 2015 for jscript9.dll which is by default used by IE11. We HIGHLY recommend this patch to urgently get installed intermin beside regular patch days and before XMAS. Esp. In Europe (Germany, Switzerland, EMEA) we have has a large amount of […]

Deployment GPO | Gruppenrichtlinien Hotfixes, Updates Scripting W10

Samsung SSD + Bitlocker leak

08.11.2018 admin

Check if you are affected by the 11/2018 SSD Bitlocker Leak. ADV180028 | Guidance for configuring BitLocker to enforce software encryption Security Advisory, Published: 06.11.2018 Producer: Samsung and Crucial Affected models proof: Crucial MX100, MX200, MX300, Samsung EVO 840, 850, Samsung External USB T3/T5 There is a leak with certain SSD Hard disk (Solid-state) together […]

Deployment GPO | Gruppenrichtlinien

GPO, W10, CSE_NOBACKGROUND and CSE_Drives GPO, English German mix how to fix RIGHT way

31.07.2018 admin

There have been some WRONG Blogs about correcting this issue with wrong GPO / Gruppenrichtlinie Language / Sprach-Files. Here is the error you see. Folgende Fehler sind aufgetreten: Das Richtlinienpräsentationselement “CSE_NOBACKGROUND” auf das in Präsentation “CSE_Drives” verwiesen wird, ist nicht vorhanden. Datei \\SERVER045.bsb.local\SysVol\bmw.local\Policies\PolicyDefinitions\GroupPolicyPreferences.admx, Zeile 334, Spalte 70 Please do a COPY and DUMP of the […]

Deployment GPO | Gruppenrichtlinien W10

EFAIL and Microsoft GPO Policy Chaos

16.05.2018 admin

Problem: There is a man-in-the-middle leak where you can capture an E-Mail (Only if you have access to the flow) attach a content And if the CLIENT does autoload (When you open the E-Mail) external pictures get content. Now this would not be too complicated if there where No newsletters where people store large pictures […]

Deployment GPO | Gruppenrichtlinien Intunes Microsoft SCCM,MEM,MDT W10

W10 _German_Deutsch WIN 10 ENT how to add English as display language with DISM

19.10.2015 admin

Enhance your W10 or W11 migration experience with this insightful solution. When transitioning from Windows 7 to Windows 10, especially in non-international companies within the DACH region, having a W10 Admin machine becomes essential, especially if your domain controllers are still operating on 2012R2. Encounter an issue where, on a German Windows 10 system, RSAT […]

GPO | Gruppenrichtlinien Microsoft Server OS Server 2008 R2 Server 2012 R2 Server 2016 W10

Fine grained Password Policy on 2012R2 made easy with ADAC

08.07.2015 admin

ADAC = NOT Deutscher Pannendienst 😉 Fine grained Password Policy in 2013 R2 Domain Active Directory, Error 4625 event Sometimes you need accounts TO None expire or not getting Locked out. We all now it’s stupid in security terms but if the software has a bug and locks the account you have to hurry. Search […]

Deployment GPO | Gruppenrichtlinien Scripting W10

W7 client, Error 2221 with Logonscripts

12.05.2015 admin

System Error 2221 has occurred in Batch Logonscripts If you run a logon script on Windows 7 you get an error 2221 when the client tries to mount a network drive. We have also seeing this appear in Outllook.exe with Exchange Server. User suddenly can’t connect to network share Name Resolution is running You can […]


Try our new Certificate Revocation List Check Tool CRLcheck.exe is a tool developed to verify digital signatures of executable files. It collects files from known paths on your client, checks their signature, and checks Certificate Revocation Lists (CRL) and OCSP download. This helps avoid delays in launching files.

Category: GPO | Gruppenrichtlinien