Group Policy Patch MS16-072– “Breaks” GP Processing Behavior

One of Microsoft’s latest patches changes the security context of GPO processing for the user policies. This is a new ‘feature’ not a bug, its a new way of securing GPO processing.

You can read Microsoft’s KB on it from KB316622

sdmsoftware has a powershell script to automate the security change for you.

It would be nice if Microsoft gave more of a warning on this change. Instead the patch is released and it can cause GPO’s not to apply as expected because the new requirements for security.

Not what I wanted to be working on today. We will be patching this weekend.

InGPO, patches

Enhanced powershell history command

Copy PowerShell History Command https://jdhitsolutions.com/blog/powershell/8777/copy-powershell-history-command/ Here's a quick powershell function to let you see and select a command from your...

jayb

Ad security assessment with powershell

4sysops.com/archives/perform-active-directory-security-assessment-using-powershell/ Here's a great way to review your active directory security with actionable items to follow up on

jayb