This is a really simple procedure: Open Group Policy Management. In the console tree, double-click Group Policy Objects in the forest and domain containing the Group Policy object (GPO) into which you want to import settings. Right-click the GPO, and then click Import Settings. Follow the instructions in the Import Settings Wizard, and then click
Do you need to deploy to a large amount of systems some Trusted Root or Intermediate Authority stores? Certutil –f –addstore CA .crt Just make the above into a batch file and push via group policy.
RPC by default can grab any dynamic port above 1024. Security sometimes may ask you to limit that to a much narrower range. A the minimum you should have about 100-200 ports available for RPC communication. Here is the registry setting: HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc Ports: REG_MULTI_SZ: 5000-5100 PortsInternetAvailable: REG_SZ: Y UseInternetPorts: REG_SZ: Y Full MS KB
Issue this command to reset GPO settings to their defaults (enter thisas one line): secedit /configure /db reset /cfg “c:windowssecuritytemplatessetup security.inf” /overwrite Delete the registry.pol file if it exists (enter this as one line): del c:windowssystem32grouppolicymachineregistry.pol Reboot the server
This modification helps identify various logon problems including group policy processing and roaming profile issues. Very helpful but should be enabled for troubleshooting purposes only in verbose mode. Modify the following registry value: Subkey: HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionWinlogon Entry: UserEnvDebugLevel Type: REG_DWORD Value data: 10002 (Hexadecimal) set this to 0x00030002 –this will give debug/verbose output: the log