再次之前先讲一些知识点: 密码的难题 每台Windows主机有一个内置的Administrator账户以及相关联的密码.大多数组织机构为了安全,可能都会要求更改密码,虽然这种方法的效果并不尽如人意.标准的做法是利用组策略去批量设置工作站的本地Administrator密码.但是这样又会出现另一个问题,那就是所有的电脑都会有相同的本地Administrator密码.也就是说,如果获取了一个系统的Administrator认证凭据,黑客就可以获取他们所有机器的管理权限. 总结:在域中信息的搜集是相当…

一.Setting Home Page with Group Policy Preferences 1.Open the Group Policy Management Console and create a new GPO. 2.Browse to User Configuration -> Preferences -> Control Panel Settings -> Internet Settings. Right click and choose New -> Inte…

总结与反思: GPP中管理员给域成员添加的账号信息存在xml,可以直接破解拿到账号密码. Windows Sever 2008 的组策略选项(GPP)是一个新引入的插件,方便管理员管理的同时也引入了安全问题 测试环境 windows7 普通域成员 windows2008 域控 首先部署GPP,这里我部署的策略是给域成员都添加一个test用户,密码为test123 添加一个本地用户 然后来到组策略管理 将domain computers 添加到验证组策略对象 然后到域成员win7这台机器上执行 g…

Due to IE10 published, I'll conclude the methods that how to add trust sites in to IE of the version before IE10. General, there are three methods to set trust sites to client machine by GPO from DC configured on windows 2003 or windows 2008. If the…

Overview In this article, I’ll talk about your options when it comes to managing Group Policy using PowerShell. To be sure, depending upon your needs, Group Policy is nearly a full citizen in the world of PowerShell-based management. I’ll talk about…

Opening a file from a DFS domain share shows a security warning while openning from the server share directly doesn't. To solve this problem, add "*.domain.local" to intranet zone in internet options. To add the domain to the intranet zone autom…

10 Common Problems Causing Group Policy To Not Apply Group Policy is a solid tool and is very stable. Microsoft has made constant improvements to it since Windows 2000. It allows for the configuration and deployment of pretty much anything in your Ac…

参考:http://supportishere.com/how-to-apply-local-group-policy-settings-silently-using-the-importregpol-exe-and-apply_lgpo_delta-exe-utilities/ In many Organizations, the AD support team is separated from the team in charge of Imaging.  The AD team natu…

RDP setting group policy 1.Login to domain controller and go to Group Policy Management tool2.Click to Domain name and double click Group Policy Object3.Right click and new a GPO"RDP settings"4.Go to "Computer Configuration"->Polici…

一.How to create a Group Policy Central Store You have downloaded or created your own Group Policy Administrative Templates, and would like them to be stored centrally, opposed to individually on each Domain Controller. Here’s how to create a Group Po…