Dcgpofix: Safely Reset the Default Domain Policy and DC Policy
When the Default Domain Policy or Default Domain Controllers Policy is corrupted or missing, dcgpofix recreates it with Windows defaults. Learn what it resets, what it never restores, how to back up first and how to put password, lockout, Kerberos and user rights settings back.
September 29, 2026
Enable RDS session shadowing and allow non-admin users RDP access
Configure Remote Desktop session shadowing through Group Policy so helpdesk staff can view or control user sessions with or without consent, connect with mstsc /shadow, and grant non-administrators the right to log on through Remote Desktop and to shadow others.
September 29, 2026
Map Network Drives with Group Policy: Drive Maps, Targeting and Fixes
Map department and home drives on Windows 11 and Windows Server 2025 with Group Policy Preferences Drive Maps and item-level targeting, a logon script alternative, the EnableLinkedConnections fix for elevated apps and an Intune script for cloud devices.
September 29, 2026
Import ADMX templates (Office, Chrome, Edge) into Intune and the AD Central Store
Add vendor ADMX and ADML files for Microsoft 365 Apps, Google Chrome and Microsoft Edge to the SYSVOL Central Store and to Intune's Administrative Templates so the same policies are available in GPO and Settings Catalog.
September 29, 2026
Group Policy Loopback Processing: Merge vs Replace for RDS Hosts and Kiosks
Make user settings follow the computer on RDS hosts, kiosks and classrooms with loopback processing: understand merge and replace, gather the right GPOs, set security filtering so users and computers can both read them, and verify with gpresult and event logs.
September 29, 2026
Deploy Printers with Group Policy: Preferences, Print Management and Point and Print
Push shared and TCP/IP printers to Windows 11 and Windows Server 2025 with Group Policy Preferences or Deployed Printers, keep Point and Print secure after PrintNightmare, pre-stage package-aware drivers, target by group or site and use Universal Print with Intune.
September 29, 2026
Disable RDP Drive Redirection with GPO: Clipboard, Printers, USB and Smart Cards
Block drive, clipboard, printer, USB and smart card redirection in Remote Desktop sessions on Windows Server 2025 and Windows 11 with session host Group Policy, client-side registry values, RDS collection properties and Intune, and keep an exception for IT.
September 29, 2026
Enable Remote Desktop with Group Policy: NLA, Firewall Rules and User Access
Turn on RDP for Windows 11 and Windows Server 2025 computers with one GPO: allow connections, require Network Level Authentication, open the Remote Desktop firewall rules, manage Remote Desktop Users, optionally change the port, and do the same with Intune.
September 29, 2026
Group Policy Desktop Wallpaper and Lock Screen: Complete Guide for Windows 11
Set a company desktop wallpaper and lock screen image on Windows 11 and Windows Server 2025 with Group Policy: copy the image locally, apply the Desktop Wallpaper and lock screen policies, work around Pro edition limits and use Intune for cloud devices.
September 29, 2026
Block USB Storage Group Policy: 5 Methods for Windows 11
Block USB flash drives, external disks and phones on Windows 11 and Windows Server 2025 with Removable Storage Access, Device Installation Restrictions, BitLocker To Go and Intune, while approved drives, keyboards and mice keep working.
September 29, 2026