I have just upgraded our company's domain controller from NT 4.0 to Windows 2008 Server. I used the in-place upgrade path, going first from NT 4.0 to Windows 2003 Server and then 2003 Server to 2008 Server. The orginal NT 4.0 domain was name Company. The new domain is Company.local. I have confirmed user and computer information was prop...
How would I set the "overwrite as needed" setting on Event logs other than Application/Security/System? Specifically I'd like to apply this to the Powershell and Windows Powershell Logs, in addition to any other future logs that may be added. This needs to be applied to both server 2003 & 2008. ...
My company has got quite a number of client laptops out in the field. These laptops are running Windows Vista Home edition. I was recently asked if I could find a way to disable the user's ability to adjust the system time. My first thought was to use gpedit, but as I found this is unavailable in home edition. I then looked for reg...
I have some .NET assemblies on a network share that I need to give FullTrust access to all of my users. What is the best way to do this using Group Policy? ...
I have a local application running with an user than have a group policy indicating this user can’t shutdown the pc. And then I use your code, but when I ask by user and password to impersonate my app. I received the next error System.Management.ManagementException: it’s not possible to use the user’s credentials for the local connecti...
In IE6 there was a registry key hidden away that would allow you to enable autocomplete but only for usernames, not passwords. This key no longer has any effect in IE8. I can either enable or disable autocomplete for usernames and passwords, but not just one of the two. What I'm looking for is a way to enable autocomplete for username...
I would like to query the domain wide settings of a specific group policy object. How do I do that in Powershell or WMI? For instance I would like to know the value for the password policy setting 'Minimum password length' that is configured in the GPO for the entire domain. ...
I have installed a windows application, whose configuration settings come from a GPO (User configuration) on a Windows Server 2003 machine. The GPO sets a few registry keys, specific to the application, on the client's registry. If i change these registry settings on the client machine via the application, will those registry settings g...
Is it possible to check if an account has "Logon as service" right programatically. I know how to setup and check this manually but I would like to check it from C# code. I need to check if this right is enabled on domain level, not just on that particular server. Edit: I am looking to find out if user "Logon on as a service" is define...
Hello. I would like to write a Group Policy Extension for my application. The config is rather complex (hierarchical) and so doing it via ADMX is not a likely option. The problem is I cannot find any sample code to help me even get started. The MSDN help (http://msdn.microsoft.com/en-us/library/aa374176%28VS.85%29.aspx) offers little in...
My laptops security log is getting full of access events where NETWORK SERVICE is listening for incoming traffic. The audit policy for 'Audit object access' is set for failure and I want to disable it. It fails because the windows firewall is preventing connection. When I go to the GPO editor the checkboxes for changing the settings ar...
I would like to add software restriction policies programatically using c#. For example: Add and additional rule to disallows paint.exe to run. Unfortunately I don't have the slightest idea how I could achieve this in c# Thx in advance, Tom ...
Can Windows Forms ClickOnce deployment be used within USAF-SDC guidelines? From the white paper below, it appears that the SDC policy is a contract between Microsoft and USAF. Since Microsoft also built ClickOnce/.net framework/Windows Forms, do they allow "ClickOnce" deployments within SDC? I know that I should probably just call M...
I want to make my app GPO aware. I know that it's basically just reading from a specific registry path but I still have some questions: How do I detect GPO refreshes? There's RegisterGPNotification here: http://msdn.microsoft.com/en-us/library/aa374404(VS.85).aspx but is there anything ready baked for C# out there or at Microsoft? What...
I'm hoping to lock down, a Windows 7 laptop into more or less a kiosk type mode. Basically login to Windows 7, automatically open up a silverlight out of browser application. It should also prevent the removal of the silverlight app. I can think of a few dirty ways to do this off the top of my head, I'm just hoping for a more holistic...
Possible Duplicate: Why Account is off Hi In group policy, local policy and account policy have a lock icon and have been disabled. I cant config them. I don't know why? ...
I need to setup a script in group policy that we be used in different regions of the world. Are environmental variables such as %ProgramFiles% language specific? I'm hoping that a script of %ProgramFiles% can be used both in spain and france even though their language is setup for the specific regions. Thanks ...
Having a look at this code http://msdn.microsoft.com/en-us/library/ee862406%28VS.85%29.aspx It says "Add the Microsoft.GroupPolicy.Management assembly to your project" but i cant seem to find out where to get Microsoft.GroupPolicy.Management from. ...
This is almost the same as http://stackoverflow.com/questions/101647/how-to-schedule-a-task-to-run-when-shutting-down-windows, except I need to do it programmatically. Also, I need the guarantee that when the script is run, no application can cancel the shutdown anymore. Is this possible? Thanks. Update, with a little context: My comp...