Comments on: Removing Remote Installation Services User Settings from the Default Domain Policy

By: Carl Webster

Carl Webster — Tue, 05 Nov 2024 14:07:08 +0000

In reply to Robert Oram.

If you could email me screenshots of your process maybe I could help.

Webster at CarlWebster dot com

Thanks

Webster

By: Robert Oram

Robert Oram — Thu, 24 Oct 2024 20:58:38 +0000

Hi,
I tried this twenty times, in slightly different ways. It always says I don’t have permission, but I am logged in as a Domain Admin.

Any ideas?

Thanks,
Bob

By: Lachlan

Lachlan — Fri, 08 Dec 2023 01:47:05 +0000

Hi Carl,
actually ran into this one today doing a GP health check. Quality write-up, thanks.

By: James

James — Tue, 03 Oct 2023 12:32:11 +0000

I just wanted to say thank you. A clearly explained and effective solution to the issue. Nice work.

By: Carl Webster

Carl Webster — Wed, 02 Mar 2022 10:58:34 +0000

In reply to Someguy. That is why I don't tell you to delete the folder that way. Webster

By: Someguy

Someguy — Wed, 02 Mar 2022 03:51:15 +0000

Delete from C:\Windows\SYSVOL\sysvol\domain.tld\Policies{31B2F340-016D-11D2-945F-00C04FB984F9}\USER\Microsoft as trying to delete from the UNC path (\\server\…) will flag for the file in use and fail.

By: Carl Webster

Carl Webster — Fri, 10 Sep 2021 12:11:07 +0000

In reply to dnsss.

I don’t believe I used the word “troubleshooting” in the article. I pointed out that Microsoft says you should have no user settings in the Default Domain Policy. But back in the early Server 2003 days, Microsoft themselves put user settings in that GPO. How do you delete the settings once you no longer have a Server 2003 domain controller (which you should have none of those in 2021)? My article showed you how.

Thanks

Webster

By: dnsss

dnsss — Fri, 10 Sep 2021 09:32:23 +0000

In reply to Carl Webster. Interesting. How would disabling something that is not in use hinder troubleshooting? Thanks

By: Carl Webster

Carl Webster — Thu, 02 Sep 2021 12:00:25 +0000

In reply to dnsss.

I disagree. DOing that can hinder troubleshooting and does nothing to improve performance.

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/does-disabling-user-computer-gpo-settings-make-processing/ba-p/570719

Thanks

Webster

By: dnsss

dnsss — Thu, 02 Sep 2021 07:19:07 +0000

Just wanted to recommend also disabling User Configuration entirely, as it’s not needed where no User settings are configured.

By: Carl Webster

Carl Webster — Wed, 12 May 2021 14:40:16 +0000

In reply to RNR1995. I am glad you found the article helpful and glad you were able to clean something out of your Default Domain Policy. Webster

By: RNR1995

RNR1995 — Wed, 12 May 2021 14:36:19 +0000

Hello
Just wanted to say thank you for this information
I could not find the settings in GPMC
My domain build is originally from 2000 right when AD came out
Ran across this resetting my Default Domain Policy, thought it was odd as those settings are not in any of our other Domains
thanks again
Ron