Group Policy & SYSVOL
Deploying Microsoft security baselines with GPO
Deploy Microsoft security baselines with Group Policy: SCT, Policy Analyzer gap analysis, LGPO testing, ring-based rollout, exceptions and drift checks.
Intermediate
Guides tagged
#group-policy
Group Policy & SYSVOL
Auditing GPO permissions and gPLink rights
Find who can edit, create and link GPOs in Active Directory: GPO ACLs, gPLink rights on OUs and sites, Group Policy Creator Owners and WMI filters.
Intermediate
Group Policy & SYSVOL
Finding and removing GPP passwords (cpassword)
Find every Group Policy Preferences cpassword in SYSVOL, backups and client caches, map it to the exposed account, rotate it and stop it coming back.
Foundation
NTLM & Legacy Protocols
Require SMB signing and disable SMBv1 domain-wide
Enforce SMB signing on clients and servers, understand Windows 11 24H2 and Server 2025 defaults, audit SMBv1 use, and remove it without breaking file access.
Foundation
Passwords & Service Accounts
Deploying Windows LAPS: schema, permissions, policy
Deploy Windows LAPS end to end: schema update, OU permissions, encryption, AD vs Entra backup, GPO settings, legacy LAPS migration and verification.
Foundation
Group Policy & SYSVOL
Group Policy and SYSVOL hardening
Lock down GPO delegation, purge Group Policy Preferences cpassword secrets from SYSVOL, and add change control to prevent silent GPO abuse.
Foundation