@Mike-Davis said in GPO - Install software based on User - Without user involvement:

@Dashrender said in GPO - Install software based on User - Without user involvement:

Many policies can't be applied to users and have to be applied to the computer. that said you might be able to set the Item level targeting to limit it to specific users.

This is your problem.

If you want to deploy the software based on user, you need to deploy it under User Configuration -> Policies -> Software Settings -> Software installation.

You tried to deploy it under Computer Configuration, and filtered by User, so it gets totally ignored.

This is only a problem if your computer is not part of this GPO pool - or you're trying to run things from both computer and user without loopback enabled.

@Tim_G said in GPO Path?:

@Grey said in GPO Path?:

So, what's the current method to add a single trusted site to my intranet zone in GPO, eh? And where do I modify all of the trusted sites/zones and activex now?

I was answering the above question. Of course these will say not configured, because you haven't configured them yet.

That's the thing though; there is configuration from the previous IT Team.
CRwvU7j.png
I should be able to edit that and I just can't. The path shown isn't there for me.

@scotth said in Rolling Out Scale Driver Updates with Group Policy on Windows Server 2012 R2:

@scottalanmiller said in Rolling Out Scale Driver Updates with Group Policy on Windows Server 2012 R2:

@scotth said in Rolling Out Scale Driver Updates with Group Policy on Windows Server 2012 R2:

We are just starting to plan our hardware refresh. I'm seriously considering Scale. I like the info that I've seen so far.

We love ours, it has been great.

I'm still pulling down information..... I need a vibrant DR plan in place or decided on before I commit to a platform. It always seems to be overlooked as an afterthought.

Common approach is to get something like a Synology or a ReadyNAS and use the Scale HC3 built in snapshot and export backup functionality to push full image backups on a schedule out to the NAS.

@Dashrender said in Rename Desktop Icon via GPP:

@IRJ said in Rename Desktop Icon via GPP:

Duh!!! I can just delete and create a new one... LOL

This just means you have two entries in your GPO for while.

Yeah. I actually deleted some really old shortcut GPOs that are about a year old while I was in there. I can probably safely remove this after a month.

6 of one. It accomplishes what you wanted without having to go to each system and do it manually. Is it a full-on GPO setting? No. Will it work? Probably.

Yeah I've done it before. It just resorts your default policy. It doesn't affect your other gpos

@Dashrender logged in as the administrator there were no printers. I added and deleted the printer from there multiple times.

Cached mode for 2016 is disabled just like all the rest, yeah!

I do this because calendars don't play nice when you're opening up 12 other people calendars regularly, and so are 80 other people.

No cached mode means you're working live on the system at all times, or your not working at all.

The key...if you're into functional GPO's (vs. monolithic) is having an effective and meaningful OU structure. Otherwise, half of your time will be creating security filters or specific targeting which can get very confusing very quickly.

The performance impact of processing GPO's in general is negligible, but it does depend on what that GPO is doing (i.e. deploying software in general or printers over slow links? Have a seat and grab a cup of coffee). I would be more concerned if you have slow links at your sites - if this is the case, you need to ensure that you have Sites and Services configured appropriately and a RODC at your remote site to facilitate speedy logins.

Being aware of GPO enforcement (which you should try to avoid) and LSDO ordering will help you tons.

There's really no right or wrong way to deploy GPO's as it is more about what you're doing with them, how they are deploying, and what you're deploying them to.

Personally, my preference is to break my GPO's out to functional objects - i.e. this one is for security, this one is for desktop preferences, this one is for drive mappings, etc.

This gives me an idea for a topic...

@Dashrender Eons ago... http://sillydog.org/narchive/full4.php

It was actually pretty good too...

@Dashrender said:

@IRJ said:

@Dashrender said:
but I'd say about half are utterly unwilling to do the most basic things when they run into any type of problem.

I'm glad I'm not the only one that runs into this. haha

@IRJ said:

Note: This script only works when installing VNC. That was no problem for us since we were a couple revisions behind.

I just stopped the VNC service on each PC and pushed down the MSI and installed using the new password.

I knew once I pointed you in the right direction you would get it 🙂

That will get you, it got me back in the day. lol

@Dashrender said:

I'm trying to impress my boss with Windows 8

Good luck - I'm not sure I'm impressed too much. As far as Metro apps go, there's a number of little widgets in there for things like news and weather that constantly update themselves, along with a Reader app. Just wondered if anyone was able to integrate any of them into their productivity routine.

@IRJ said:

Ok. The GPO says it will work for versions 8,9,10, and 11. So one GPO should work

As long as it just looks for whatever IE is on the machine and not for a specific version.