Table of Contents

Microsoft - Active Directory - Group Policy - Miscellaneous

Windows XP Professional Product Documentation - Group Policy
How Group Policy Software Installation Extension Works
How a slow link is detected for processing user profiles and Group Policy
Default Behavior for Group Policy Extensions with Slow Link
Troubleshooting Group Policy application problems
Windows XP Professional Product Documentation - Gpupdate
Microsoft TechNet - Group Policy Frequently Asked Questions (FAQ)
Microsoft TechNet - Inside ADM and ADMX Templates for Group Policy
MSDN - Windows 2000 Group Policy Registry Reference
ActiveDir.org - Group Policy FAQ

Group Policy ADM Files
Create your own ADM templates
Microsoft Support - How to create custom administrative templates in Windows 2000
Microsoft Support - HOWTO: Use Group Policy to disable USB, CD-ROM, Floppy Disk and LS-120 drivers

Windows Server 2003 Group Policy

How to Force Remote Group Policy Processing

[PDF] How Secure Is Group Policy?
Group Policy Guts (PDF)

Monitoring Group Policy Changes with Windows Auditing
Group Policy Wiki
GPO Troubleshooting FAQ
gpoguy - Understanding Policy "Tattooing"
Six solutions to Windows Server 2003 group policy problems

Using Restricted Groups

“by default, GPOs that are linked at the OU level override those that are defined at the domain level”

Managing the Windows 2000 Registry - Chapter 7 - Using Group Policies (O'Reilly)

Blogposts/Articles

The Angry Technician - Group Policy Preferences: still useful, still pants
Windows IT Pro - What's Wrong with Group Policy? - How to work around five problems plaguing it

Group Policy processing

“The GPO with the lowest link order is processed last, and therefore has the highest precedence.”
Bron:Microsoft TechNet - Group Policy processing and precedence

Startup/Shutdown en Logon/Logoff scripts

Windows 2000 Computer Startup Scripts

Internet Explorer en Group Policy

Windows XP TechCenter - Internet Explorer Policy Settings
How to set advanced settings in Internet Explorer by using Group Policy Objects
You cannot manage Internet Explorer 6 Group Policy settings on a Windows 2000-based computer
Ask the Performance Team - Overview of Internet Explorer Group Policies

Preference mode en policy mode

Policy mode instellingen worden elke keer opnieuw toegepast. Preference mode instellingen worden éénmalig toegepast en pas opnieuw toegepast als de GPO erachter aangepast word.
Bron: Group Policy Internet Explorer Settings Preference mode

Folder redirection

Voor het redirecten van bijvoorbeeld My Documents naar een locatie \\servernaam\Home\username moet je de folder redirection met de volgende instelling aanmaken:
Redirect to the following location:

\\servernaam\Home\%username%

Als je vervolgens op OK klikt en de properties weer opent, dan zie je:
“Create a folder for each user under the root path”
Root path:

\\servernaam\Home

Voor de gebruiker Clair word dit dan

\\servernaam\Home\Claire 

Als je direct “Create a folder for each user under the root path” had gekozen en

 \\servernaam\Home 

had opgegeven dan krijg je voor Claire:

\\servernaam\Home\Claire\My Documents.

Zie ook:Mark Minasi's Reader Forum - Change redirected folder settings

Folder redirection

Mocht je bij het aanpassen/aanmaken van basic folder redirection voor My Documents naar een al bestaande homedir tegen de melding “This security ID may not be assigned as the owner of this object.” aanlopen, zorg dan dat je op het tweede tabblad van de My Documents folder properties in GPO de optie “Grant the user exclusive rights to the folder name” uitvinkt.
Bron:Microsoft Support - Event ID 101 and Event ID 1000 Messages May Be Displayed When Folder Redirection Is Set Up with Group Policy

Troubleshooting

..::\\ www.christiano.ch //::.. - Debugging Group Policy Processing
Ask the Directory Services Team - Enabling Group Policy Preferences Debug Logging using the RSAT
Microsoft - Windows IT Center - Vista - Troubleshooting Group Policy Using Event Logs